PT-2026-93712 · Unknown · Curiosity Workspace
CVE-2026-88817
·
Published
2026-09-16
·
Updated
2026-09-23
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Curiosity Workspace (affected versions not specified)
Description
An authenticated, non-guest user can enroll themselves as an administrator and member of an existing access group without requiring an invitation or approval. This issue does not grant application-wide administrator privileges and cannot be used to obtain root access to the application or its underlying host.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Privilege Management
Improper Access Control
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Curiosity Workspace