CVE-2026-86678

Summary

This flaw allows a low-privileged user to obtain an administrator’s API key, enabling them to perform administrator-level actions, which can lead to unauthorized access and data manipulation.

Exploitability

Exploitation is relatively straightforward given the low privilege requirement, and the attacker would need access to the application to obtain the API key.

Blast radius

If exploited, the impact is high, as it could lead to unauthorized administrative actions, potentially compromising the entire system and sensitive data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 182001 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.