grafana-signup-invite-join

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · grafana-signup-invite-join Write-up: https://abraxaslabs.tech/research/grafana-signup-invite-join grafana-signup-invite-join Class: Privilege leftover Reach: Remote Grafana OSS 13.2.3 6193dc0 - Grafana Labs When...

CVE-2026-31070: Improper Privilege Management

The LalanaChami Pharmacy Management System commit 5c3d028 allows unauthenticated remote attackers to escalate privileges by self-assigning an administrative role during registration. The /api/user/signup endpoint fails to validate the role parameter in the request body...