CVE-2026-19928 OpenBoxes Role Interceptor RoleInterceptor.groovy needManager privileges management

A vulnerability was determined in OpenBoxes up to 0.9.7. This affects the function needManager of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Role Interceptor. Executing a manipulation can lead to improper privilege management. The attack may be...

CVE-2026-19928

OpenBoxes prior to version 0.9.8 is affected by CVE-2026-19928, impacting the Role Interceptor component (grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy) where the needManager function can lead to improper privilege management. The vulnerability is exploitable remotely and has pu...

PT-2026-73074

Name of the Vulnerable Software and Affected Versions OpenBoxes versions prior to 0.9.8-hotfix1 Description Remote manipulation of the needManager function within the Role Interceptor component located in grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy can lead to improper privile...

CVE-2026-19928: Improper Privilege Management

A vulnerability was determined in OpenBoxes up to 0.9.7. This affects the function needManager of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the component Role Interceptor. Executing a manipulation can lead to improper privilege management. The attack may be...