CVE-2026-94178

Summary

A privilege escalation vulnerability allows authenticated users to import and export customer data with elevated privileges, potentially leading to unauthorized access to sensitive information and system resources.

Exploitability

Exploitation requires an authenticated user account with import/export permissions, making it moderately difficult but achievable through social engineering or credential compromise.

Blast radius

If exploited, this vulnerability could allow attackers to access and manipulate customer data, potentially leading to data breaches, unauthorized transactions, and privilege escalation across the affected system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 2.5.3 or later to address the subscriber privilege escalation flaw.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.