medium5.9
CVE-2026-12673
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain …
Impact
Liquidfiles versions before 4.2.12 are affected by a broken access control vulnerability resulting in privilege escalation from an Admin in a secondary domain to a Sysadmin by modifying a group in their managed secondary (non-default) group.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Liquidfiles | Liquidfiles | before 4.2.12 |
Versions were read from the advisory text. No structured product data has been published for this record yet.