Skip to content
Threat Feed
Subscribe

Product

Frab (<= 0.9.1)

1 brief RSS
high advisory

frab: Privilege escalation via conference_users_attributes (CVE-2026-125364)

An authenticated crew user in frab version 0.9.1 and earlier can escalate privileges to an organizer role by manipulating nested attributes in User controller requests.

frab web-application privilege-escalation authentication-bypass
1t 1c