← All advisories

Medium severity4.3NVD Advisory· Published Jul 25, 2025· Updated Apr 15, 2026

CVE-2025-54596

CVE-2025-54596

Description

Abnormal Security /v1.0/rbac/users_v2/{USER_ID}/ before 2025-02-19 allows downgrading the privileges of other user accounts.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Abnormal Security/rbac/users_v2llm-create
Range: < 2025-02-19

Patches

Vulnerability mechanics

References

1

bugcrowd.com/disclosures/b2406123-c02d-47cf-bcf1-8af57e1de526/no-rbac-validation-on-api-requests-user-managementnvd

News mentions

0

No linked articles in our index yet.