High severity7.2NVD Advisory· Published Nov 11, 2026· Updated Nov 11, 2026

CVE-2026-76079

Description

Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Prior to version 0.224.0, an organization ADMIN can mint an OWNER membership via createUser, bypassing the owner-only set-owner authorization gate. This issue has been patched in version 0.224.0.

Affected products

Getprobo/Probollm-fuzzy
Range: <0.224.0

Patches

Vulnerability mechanics

References

github.com/getprobo/probo/commit/eb9274f2cd7101f89c21c18f6d7a3570f95aff32nvd
github.com/getprobo/probo/pull/1475nvd
github.com/getprobo/probo/releases/tag/probod%2Fv0.224.0nvd
github.com/getprobo/probo/security/advisories/GHSA-cppp-g98f-gfppnvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000