Rule Explorer

MCP server configuration containing stdio/command execution parameters is processed without verifying administrative privileges.

TSCVE-2026-79748CWE-269CWE-862

Usergroup modification without server-side sanitization allows privilege escalation.

PHPCVE-2026-77133CWE-269CWE-915

Detected direct passing of parsed request body to entity edit logic without filtering sensitive backend configuration properties or checking appropriate permissions.

PHPCVE-2026-76836CWE-269CWE-502CWE-915

JWT token claims use a shared audience variable or kernel audience string instead of a scoped service audience, allowing low-privilege service tokens to authenticate against core kernel APIs.

GoCVE-2026-69084CWE-269CWE-287

A filterable capability is defined using `apply_filters`, but authorization is checked against hardcoded 'manage_options' rather than the filtered capability variable. This prevents custom capability filters from granting access to non-administrative roles.

PHPCVE-2026-66695CWE-269CWE-863

A sensitive field like 'role' or 'is_admin' is accepted in validation rules without an explicitly defined allowlist (e.g., `in:`, `Rule::in`). This can lead to vertical privilege escalation via mass assignment if an attacker provides arbitrary administrative values and the backend does not enforce independent authorization for the requested role value.

PHPCVE-2026-63102CWE-269CWE-285

Instance profile and configuration overrides during migration must enforce project restrictions via project.AllowInstanceUpdate to prevent privilege escalation.

GoCVE-2026-62940CWE-269CWE-862

Validated user input is passed directly to staff update service without checking for restricted role assignments like GLOBAL_ADMIN, allowing tenant administrators to escalate privileges.

TSCVE-2026-48086CWE-269CWE-863

The GitHub Action workflow runs the `anthropics/claude-code-action` with powerful, unconstrained MCP tools like `mcp__github__submit_pending_pull_request_review`. If the workflow processes pull requests or issues from untrusted authors, this exposes the system to prompt injection. An attacker could hijack the AI reviewer to abuse these tools or exfiltrate th

YAMLCVE-2026-47751CWE-269CWE-74

NewAuthenticator is constructed without a cluster ID resolver parameter. Omitting the cluster ID getter prevents validation of token cluster scopes against the request's cluster ID, potentially leading to authorization bypass across clusters.

GoCVE-2026-44945CWE-269CWE-863

prctl(PR_SET_DUMPABLE, 1, ...) is called unconditionally without a boolean guard. In privilege-separated (setuid) architectures where the calling process still holds a privileged IPC channel to a root parent, an attacker sharing the same UID can ptrace-attach to this now-dumpable process and inject arbitrary privileged operations through that channel. Add a

Invite token creation does not verify caller roles or permissions against target invite roles, allowing privilege escalation.

TSCVE-2026-36102CWE-269CWE-285CWE-862

Relying on a user-modifiable configuration dictionary to determine system privileges permits privilege escalation.

OCamlCVE-2026-23560CWE-269

A virtual disk backend path is overridden with a locally provided path from `vBD_other_config`. This configuration dictionary is insufficiently restricted and can be modified by lower-privileged administrators (e.g., `vm-admin`). An attacker can exploit this to read or modify arbitrary files in dom0, leading to arbitrary host access or privilege escalation.

OCamlCVE-2026-23559CWE-269

Kyverno apiCall constructor invoked without a `policyNamespace` argument. Without this argument, `apiCall.Fetch` substitutes user-controlled context variables into `URLPath` and forwards the resolved path to `client.RawAbsPath` under the Kyverno admission controller ServiceAccount identity, with no enforcement that the request is scoped to the policy's own n

GoCVE-2026-22039GHSA-8P9X-46GM-QFX2CWE-269CWE-918

The RoleInterceptor changeActions list is missing 'importOutboundStockMovement', allowing unauthorized low-privilege users to import outbound stock movements.

Impersonation permission is checked against the caller's current evaluation scope rather than against the target context's ACL manager. When changing target contexts or organizations, validate permissions against the target ACL manager to prevent cross-organization privilege escalation.

GoCVE-2026-18636CWE-269CWE-502CWE-863

Impersonation permissions are checked against the caller's global scope instead of evaluating access control using the target organization's ACL manager. This can allow cross-tenant authorization bypass and unauthorized privilege escalation across organization boundaries.

GoCVE-2026-18635CWE-269CWE-863

Passing bridge job context into pipeline creation commands may bypass protected branch push permission checks, allowing unauthorized pipeline execution.

RubyCVE-2026-15423CWE-269

Unconfigured LDAP search base falls back to root naming context without logging or restriction. Searching the entire directory root DN for privileged objects like sudo roles allows any user with write access to any LDAP subtree to inject rules and elevate privileges.

CCVE-2026-14474CWE-1188CWE-269

FreeIPA Directory Server instance setup is missing the Kerberos principal matching rule configuration.

PythonCVE-2026-13097CWE-178CWE-269

Policy arguments inherited from another request may retain `DenyOnly = true`. When verifying restricted session policies, this causes only explicit denials to be checked, bypassing explicit allow requirements and leading to privilege escalation. Ensure `DenyOnly = false` is enforced when checking a session policy.

GoCVE-2025-62506CWE-269CWE-285

Using `mergo.Merge` with `mergo.WithOverride` to merge a user-supplied `Container` (typed as the upstream `k8s.io/api/core/v1.Container` or reachable through a CR `Spec.Template.Container`) into an operator-built container lets a low-privileged tenant override arbitrary container fields — image, command, args, securityContext (privileged/runAsUser/capabiliti

GoCVE-2025-32445CWE-269CWE-732CWE-913

ClusterRoleBinding (or RoleBinding) grants permissions to the built-in group "system:authenticated" (or "system:unauthenticated"). This binds the referenced role to every authenticated principal in the cluster, effectively making the role's permissions universal. This pattern caused CVE-2025-10725 (opendatahub-operator) by binding a Job/Workload-create role

YAMLCVE-2025-10725CWE-269CWE-732