VULNERABILITY INTELLIGENCE
CVE-2026-12673
EPSS probability0.40%
CISA KEVNot currently listed
Published2026-06-20
Last modified2026-06-22
Description
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by modifying a group in their managed secondary (non-default) group.
Weakness classification
- ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a: CWE-285