CVE Catalog
CVE-2026-12673
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk0.26%
17th percentile — higher than 17% of all known CVEs
Summary
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability allowing privilege escalation from an Admin in a secondary domain to a Sysadmin by modifying a group in their managed secondary group.
Risk Assessment
Organizations may be exposed to unauthorized access to resources and data, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to Liquidfiles version 4.2.12 or later to mitigate this security vulnerability.
Original NVD description (English source)
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by modifying a group in their managed secondary (non-default) group.