medium6.5
CVE-2026-51083
Incorrect access control in Proxmox Virtual Environment (PVE) 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users within limited privileges to obtai…
Impact
Incorrect access control in Proxmox Virtual Environment (PVE) 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users within limited privileges to obtain hashed passwords via the cloudinit/dump API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Proxmox | Proxmox Virtual Environment (PVE) 9.X Qemu-Server | before 9.1.8 |
| 8.X | before 8.4.8 |
Versions were read from the advisory text. No structured product data has been published for this record yet.