CVE-2026-9191

Summary

This vulnerability allows attackers to execute arbitrary code within the context of user sessions by bypassing input sanitization in REST and XDBC evaluation paths. This can lead to unauthorized actions or complete session compromise.

Exploitability

Exploitation is moderately difficult requiring an authenticated session with access to REST/XDBC endpoints, but the attack surface is broad enough that it could be leveraged by attackers with limited privileges.

Blast radius

The impact could be severe across multiple user sessions and data access points since the vulnerability allows code execution in the context of authenticated users, potentially leading to widespread data compromise or unauthorized administrative actions.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to MarkLogic Server 12.1.0 or 11.3.7 to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.