CVE-2026-27012
Received Received - Intake
Privilege Escalation in OpenSTAManager via Authentication Bypass

Publication date: 2026-03-03

Last updated on: 2026-03-05

Assigner: GitHub, Inc.

Description
OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a privilege escalation and authentication bypass vulnerability in OpenSTAManager allows any attacker to arbitrarily change a user's group (idgruppo) by directly calling modules/utenti/actions.php. This can promote an existing account (e.g. agent) into the Amministratori group as well as demote any user including existing administrators.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-03
Last Modified
2026-03-05
Generated
2026-05-07
AI Q&A
2026-03-04
EPSS Evaluated
2026-05-05
NVD
EUVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
devcode openstamanager to 2.9.8 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in OpenSTAManager version 2.9.8 and earlier. It allows an attacker to bypass authentication and escalate privileges by directly calling a specific script (modules/utenti/actions.php) to change a user's group membership arbitrarily.

Through this, an attacker can promote a regular user account, such as an agent, to the Amministratori (administrator) group or demote any user, including existing administrators.


How can this vulnerability impact me? :

The vulnerability can have severe impacts because it allows attackers to gain administrative privileges without proper authorization.

  • Attackers can promote their own or other accounts to administrator level, gaining full control over the system.
  • Attackers can demote legitimate administrators, potentially locking out authorized users.
  • This can lead to complete compromise of the system's confidentiality, integrity, and availability.

How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:

I don't know


How can this vulnerability be detected on my network or system? Can you suggest some commands?

I don't know


What immediate steps should I take to mitigate this vulnerability?

I don't know


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart