CVE-2026-58080

8.2 HIGHpublic exploit available

Published 2026-08-04 · Updated 2026-08-05

AI risk analysis

Summary: The flaw allows an anonymous client to bypass role-permission checks by exploiting a configuration issue in Eclipse Milo versions 1.0.0 through 1.1.4, leading to unauthorized access.
Exploitability: Exploitation requires the server to use `copy()` for configuration and allow anonymous sessions with permission to read or modify protected data.
Blast radius: If exploited, this could lead to significant data breaches or unauthorized control of critical systems relying on role-based permissions.
Prioritized remediation: Update to Eclipse Milo version 1.1.5 or later which addresses the issue.

auth-bypassicsconfig-flaw

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`. On servers that rely on role permissions and construct the running configuration through `copy()`, sessions receive no role IDs and the default access controller skips role-permission checks, allowing an anonymous client where anonymous sessions are permitted to read role-permission metadata, invoke protected methods, or delete protected nodes.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Weaknesses

CWE-862

Vendors

eclipse

Products

milo

Public exploit & PoC references

https://github.com/eclipse-milo/milo/commit/d51f03e9a75f313ab41c3d68d809f4b922073f1a[Patch]

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.