CVE-2026-85956

Summary

A database administrator with delegated privileges can bypass scope restrictions to backup or restore forests outside their authorized database, potentially accessing or modifying security-critical data they shouldn't have access to.

Exploitability

Exploitation requires a remote attacker with delegated database-administrator privileges who can perform backup or restore operations, making it moderately difficult but possible given the right access level.

Blast radius

The impact could be severe as attackers might gain unauthorized access to sensitive data across multiple databases, potentially leading to data breaches or privilege escalation across the entire MarkLogic deployment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to MarkLogic Server 12.1.0 or 11.3.7 to address this privilege escalation vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.