CVE-2026-8372

A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution. This flaw can only be exploited after authenticating with an admin-privileged service account.

The vulnerability allows privilege escalation of a viewer account to administrator privileges. The description does not identify a specific component or exploitation conditions.

The vulnerability could lead to a high privileged authenticated user performing a remote code execution attack. The description does not identify a specific component.

A vulnerability related to broken access control may allow an authenticated user to perform horizontal privilege escalation. It only affects specific configurations.

The described vulnerability could allow an attacker to compromise a system. Technical details are not provided in the description.

There is a possible persistent denial of service due to resource exhaustion in multiple places. This could lead to local denial of service with no additional execution privileges needed.

In multiple locations there is a possible provisioning bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed.

A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.