Medium severityNVD Advisory· Published Jul 19, 2024· Updated Apr 15, 2026
CVE-2024-6908
CVE-2024-6908
Description
Improper privilege management in Yugabyte Platform allows authenticated admin users to escalate privileges to SuperAdmin via a crafted PUT HTTP request, potentially leading to unauthorized access to sensitive system functions and data.
Patches
203b193de40b768f01680c565Vulnerability mechanics
Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.
References
2News mentions
0No linked articles in our index yet.