Mmastodon TechnologyCybersecurity first seen 5 d ago, last 5 d ago, peak #11

Warpgate flaw lets limited admins revive revoked role grants

Original: CVE-2026-91167 Warpgate privilege escalation: limited admin can revive revoked role grants. CVSS 4.3. Patch under review

A newly published vulnerability, CVE-2026-91167, affects the Warpgate authentication proxy. A user with limited admin privileges can restore role grants that were previously revoked, escalating access within the system. The flaw is rated 4.3 on the CVSS scale. A fix is still under review, and security watchers say they will share details once an update ships. Administrators running Warpgate are advised to watch for the patch.

Why now: Security professionals are circulating a fresh CVE in a widely used auth proxy while no patch is yet available.

WarpgateCVE-2026-91167

Open on mastodon →

Evidence

• CVE-2026-91167 Warpgate privilege escalation: limited admin can revive revoked role grants. CVSS 4.3. Patch under review, update when ready. https://www. valtersit.com/cve/CVE-2026-911 67/ # CVE # infosec # cybersecurity · hugovalters

API: https://socialmediatrends-api.osmike.com/v1/trends/1813453