CVE-2026-80110

8.1 HIGH

Published 2026-09-21 · Updated 2026-09-21

AI risk analysis

Summary: The flaw in pki-core allows wildcard ACL permissions to override more specific literal permissions, potentially enabling unauthorized access to certificate management functions.
Exploitability: Exploitation requires knowledge of the affected API and permission levels; preconditions include access to the CA's profile-management REST API.
Blast radius: If exploited, this could lead to unauthorized changes in the certificate authority’s issuance policy, compromising confidentiality and integrity.
Prioritized remediation: Update pki-core to a patched version or apply vendor-provided patches immediately.

aclpermissionapicertificatesecurity

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

A flaw was found in pki-core. The v2 REST ACL filter selects a tie-breaking permission for colliding literal and wildcard ACL keys using lexicographic string comparison rather than specificity, causing a wildcard-mapped permission to override a more specific literal-mapped permission when both match. In the CA's profile-management REST API this allows a request to POST /v2/profiles/raw -- intended to require Administrator-level profiles.create permission -- to instead be authorized under the lower-privileged profiles.approve permission held by the default Certificate Manager Agents group. The highest threat from this vulnerability is to confidentiality and integrity of the certificate authority's issuance policy.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weaknesses

CWE-863

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.