Vulnerability record/PUBLISHED/Published Nov 2, 2026 15:42:05 UTC
CVE-2026-109141
The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for every request that is not tied to a CA, including the bulk import endpoint POST /api/v1/bulk/cas/import. It adds a new child CA under any existing CA, gives the child any of that CA's resources, and creates the ROAs given in the request
Base score8.4/ 10
SeverityHighCVSS 3.1
Exploitability / impact
CVSS metric breakdown
Base severityHigh
Attack vectorNetworkAV
Attack complexityHighAC
Privileges requiredLowPR
User interactionNoneUI
ScopeChangedS
Confidentiality impactHighC
Integrity impactHighI
Availability impactLowA
CVSS vector string
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:LCVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityNLnet Labs
Last updatedNov 2, 2026 16:11:53 UTC
PublishedNov 2, 2026 15:42:05 UTC
ReservedOct 12, 2026 11:22:34 UTC
Credits
- Anthropic and Ada Logics