CVE-2026-33377

Dashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin

High · published May 13, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
12.5
In the wild
Unconfirmed
What it is

An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard. The user must have write access to the dashboard to escalate privilege.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00226 · 12.5th percentile
Published
2026-05-13T19:28Z
EPSS history
Timeline
  • 13 MAY 19:28Z
    Dashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin
    cvelistv5