CVE-2026-88817

— UNSCORED

Published 2026-09-16 · Updated 2026-09-18

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitation or approval. It did not grant application-wide administrator privileges, and the vulnerability could not be used to obtain root access to the application or its underlying host.

Weaknesses

CWE-269, CWE-284

References

https://docs.curiosity.ai/security/advisories/cve-2026-88817

Data: NVD (public domain). Analysis: local $0 model. Defensive use only.