CVE-2026-53527

LeafWiki is a self-hosted wiki. Versions 0.1.0 through 0.10.0 have a privilege escalation vulnerability in the user update API. An authenticated user could update their own account role and escalate privileges from a regular user, such as `viewer`, to `admin`. Exploitation requires a valid authenticated LeafWiki user account. Instances without public registration and with only trusted users are at lower practical risk. Users should update to version 0.10.1 or greater. Until a patch is available, operators should restrict account creation and ensure that only trusted users have accounts on affected LeafWiki instances. If possible, access to the user update API should be restricted to trusted users or administrators only.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/perber/leafwiki/security/advisories/GHSA-jj4r-587p-r5h5

Configurations

No configuration.

History

12 Oct 2026, 16:10

Type	Values Removed	Values Added
Summary		(es) LeafWiki es una wiki autoalojada. Las versiones 0.1.0 a la 0.10.0 tienen una vulnerabilidad de escalada de privilegios en la API de actualización de usuarios. Un usuario autenticado podría actualizar el rol de su propia cuenta y escalar privilegios de un usuario regular, como 'viewer', a 'admin'. La explotación requiere una cuenta de usuario de LeafWiki válida y autenticada. Las instancias sin registro público y con solo usuarios de confianza tienen un riesgo práctico menor. Los usuarios deben actualizar a la versión 0.10.1 o superior. Hasta que un parche esté disponible, los operadores deben restringir la creación de cuentas y asegurarse de que solo usuarios de confianza tengan cuentas en las instancias de LeafWiki afectadas. Si es posible, el acceso a la API de actualización de usuarios debe restringirse solo a usuarios de confianza o administradores.

Information

Published : 2026-08-21 22:16

Updated : 2026-10-12 16:10

NVD link : CVE-2026-53527

Mitre link : CVE-2026-53527

CVE.ORG link : CVE-2026-53527

JSON object : View

Products Affected

No product.

CWE

CWE-269

Improper Privilege Management

{"id": "CVE-2026-53527", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-53527", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-24T18:47:49.546223Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "perber", "product": "leafwiki", "versions": [{"status": "affected", "version": ">= 0.1.0, < 0.10.1"}]}]}], "published": "2026-08-21T22:16:39.147", "references": [{"url": "https://github.com/perber/leafwiki/security/advisories/GHSA-jj4r-587p-r5h5", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "LeafWiki is a self-hosted wiki. Versions 0.1.0 through 0.10.0 have a privilege escalation vulnerability in the user update API. An authenticated user could update their own account role and escalate privileges from a regular user, such as `viewer`, to `admin`. Exploitation requires a valid authenticated LeafWiki user account. Instances without public registration and with only trusted users are at lower practical risk. Users should update to version 0.10.1 or greater. Until a patch is available, operators should restrict account creation and ensure that only trusted users have accounts on affected LeafWiki instances. If possible, access to the user update API should be restricted to trusted users or administrators only."}, {"lang": "es", "value": "LeafWiki es una wiki autoalojada. Las versiones 0.1.0 a la 0.10.0 tienen una vulnerabilidad de escalada de privilegios en la API de actualizaci\u00f3n de usuarios. Un usuario autenticado podr\u00eda actualizar el rol de su propia cuenta y escalar privilegios de un usuario regular, como 'viewer', a 'admin'. La explotaci\u00f3n requiere una cuenta de usuario de LeafWiki v\u00e1lida y autenticada. Las instancias sin registro p\u00fablico y con solo usuarios de confianza tienen un riesgo pr\u00e1ctico menor. Los usuarios deben actualizar a la versi\u00f3n 0.10.1 o superior. Hasta que un parche est\u00e9 disponible, los operadores deben restringir la creaci\u00f3n de cuentas y asegurarse de que solo usuarios de confianza tengan cuentas en las instancias de LeafWiki afectadas. Si es posible, el acceso a la API de actualizaci\u00f3n de usuarios debe restringirse solo a usuarios de confianza o administradores."}], "lastModified": "2026-10-12T16:10:00.220", "sourceIdentifier": "security-advisories@github.com"}