Skip to content
Threat Feed
Subscribe

Vendor

Anchore

1 brief RSS
high advisory

Improper Privilege Escalation in Anchore Enterprise User Management API

An improper privilege escalation vulnerability (CVE-2026-63727) exists in Anchore Enterprise versions 5.11.0 to 5.27.1 and 6.0.0, specifically within the user management API, allowing an authenticated attacker to issue a crafted API call to modify user permissions and gain elevated access to resources and operations, such as granting write access to a read-only user, with fixes available in versions 5.27.2 and 6.0.1.

Anchore Enterprise +1 privilege-escalation api-security vulnerability anchore
1t 1c