Skip to content
Threat Feed
Subscribe

Product

Semaphore (< 0.0.0-20260705182501-Bb2a4e1f08c8)

1 brief RSS
high advisory

Semaphore UI Privilege Escalation via Custom Role Slug Collision

Semaphore UI is vulnerable to a privilege escalation where a project manager can create a colliding custom role slug to assign themselves owner-level permissions, bypassing access controls.

Semaphore privilege-escalation web-application cve
1t 1c