CVE Catalog
CVE-2026-25197
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.30%
22th percentile - higher than 22% of all known CVEs
Summary
A specific API endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.
Risk Assessment
The organization risks unauthorized access to other users' profiles, potentially leading to data confidentiality breaches and privilege escalation.
Recommendation
Implement proper access control on this endpoint to prevent modification of the user ID without appropriate permissions.
Original NVD description (English source)
A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.