CVE-2026-55550 NextCRM has RBAC Bypass in MCP Product Tools that Allows Low-Privileged Users to Modify the CRM Product Catalog

NextCRM is open-source customer relationship management CRM software. The CRM product catalog is an organization-wide business object. Normal application server actions restrict product creation, update, and deletion to manager and admin roles. However, in version 0.12.1, the MCP product tools...

CVE-2026-55550: Improper Privilege Management

NextCRM is open-source customer relationship management CRM software. The CRM product catalog is an organization-wide business object. Normal application server actions restrict product creation, update, and deletion to manager and admin roles. However, in version 0.12.1, the MCP product tools...

Malicious code in product-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78a4216aa0cc73ec546bea4a77dbe25da60e32aa5f2a344f581f0c83ebd4646d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...