CVE-2026-75103

Name of the Vulnerable Software and Affected Versions Crawlab (affected versions not specified)

Description An issue exists where the software fails to verify user ownership or administrative roles on the password-change endpoint. This allows any authenticated user to reset the password of any account. Attackers can use the user listing endpoint to enumerate accounts and change administrator credentials, leading to full account takeover and arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.