CVE-2026-30269

BRIEFING NOTE: CVE-2026-30269 Doorman versions 0.1.0 and 1.0.2 contain an improper access control vulnerability in the user account update endpoint that allows authenticated users to escalate their privileges by modifying their own role field. The vulnerability exists because the /platform/user/{username} endpoint fails to enforce role-based access control checks for self-initiated updates, permitting users to grant themselves non-admin privileged roles without proper authorization. This flaw affects any installation running the affected Doorman versions. The vulnerability carries a CRITICAL severity rating with a CVSS score of 9.9, reflecting its high exploitability and impact potential. The attack requires only basic authentication credentials and network access with no additional complexity, and it results in complete compromise of system confidentiality and integrity across the affected environment. The low availability impact acknowledges potential operational disruption from unauthorized privilege escalation activities. Current exploitation status indicates minimal active threat; the vulnerability is not currently listed on CISA's Known Exploited Vulnerabilities catalog and has low EPSS scoring at 0.038 percent, suggesting limited real-world exploitation attempts. However, the straightforward nature of the privilege escalation mechanism—requiring only authenticated API access—means exploit code could be readily developed. Organizations should prioritize patching beyond version 1.0.2 and implementing compensating controls to restrict role modification requests.