piccolo-admin has a privilege escalation issue - admin to superuser via session-token disclosure in GET /api/tables/sessions/.

🗓️ 10 Sep 2026 09:44:58Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 9 Views

Privilege escalation in piccolo-admin via session token disclosure in GET /api/tables/sessions/.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2026-55485	28 Aug 202620:35	–	circl
CVE	CVE-2026-55485	28 Aug 202618:13	–	cve
Cvelist	CVE-2026-55485 Piccolo Admin: Privilege escalation - admin to superuser via session-token disclosure in GET /api/tables/sessions/.	28 Aug 202618:13	–	cvelist
EUVD	EUVD-2026-67858	28 Aug 202618:13	–	euvd
Github Security Blog	piccolo-admin has a privilege escalation issue - admin to superuser via session-token disclosure in GET /api/tables/sessions/.	28 Aug 202618:14	–	github
NVD	CVE-2026-55485	28 Aug 202620:18	–	nvd
OSV	GHSA-2GH4-JMWQ-RR8W piccolo-admin has a privilege escalation issue - admin to superuser via session-token disclosure in GET /api/tables/sessions/.	28 Aug 202618:14	–	osv
OSV	PYSEC-2026-3882 piccolo-admin has a privilege escalation issue - admin to superuser via session-token disclosure in GET /api/tables/sessions/.	10 Sep 202609:44	–	osv
Positive Technologies	PT-2026-83243	28 Aug 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-55485 Piccolo Admin: Privilege escalation - admin to superuser via session-token disclosure in GET /api/tables/sessions/.	28 Aug 202618:13	–	vulnrichment

Vulners

Node

Source	Link
github	www.github.com/piccolo-orm/piccolo_admin/security/advisories/GHSA-2gh4-jmwq-rr8w
github	www.github.com/piccolo-orm/piccolo_api/pull/331
github	www.github.com/piccolo-orm/piccolo_admin/commit/96ddae12baf12288056cbb0cda6f9e8d7e22c86d
github	www.github.com/piccolo-orm/piccolo_api/commit/520ec2567ae1d2cc417c8c0d1ad0ddc05549a8a4
github	www.github.com/piccolo-orm/piccolo_admin
github	www.github.com/piccolo-orm/piccolo_admin/releases/tag/1.14.0
github	www.github.com/piccolo-orm/piccolo_api/releases/tag/1.10.0
pypi	www.pypi.org/project/piccolo-admin
github	www.github.com/advisories/GHSA-2gh4-jmwq-rr8w
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-55485

10 Sep 2026 11:02Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.18.8

EPSS0.00389

SSVC