CVE-2026-79314

A horizontal privilege escalation vulnerability exists in x-ui 0.3.2. An authenticated user can modify the inbound proxy configurations of other users, including remark, port, protocol, settings, enabled state, expiry time and traffic quota, by submitting a request referencing the target resource...

CVE-2026-79314

A horizontal privilege escalation vulnerability exists in x-ui 0.3.2 , a web-based proxy management panel. The root cause is that the update endpoint fails to verify that the target resource belongs to the requesting session user. An authenticated user can modify another user's inbound proxy conf...