CVE-2026-105171: kishor-23 food-waste-management-system Role Attribute admin.php authorization
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler. Such manipulation of the argument Name leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs network access and low-level authenticated privileges. No user interaction is required, and exploitation has been publicly disclosed.
Which deployments should be treated as potentially affected?
Deployments containing the referenced food-waste-management-system code should be treated as potentially affected because the project does not use versioning and affected or unaffected releases are not identified. Multiple endpoints are reported to be affected.
What is the impact of successful exploitation?
Manipulating the Name argument in the Role Attribute Handler can bypass authorization checks. The reported severity metrics indicate potential low-impact compromise of confidentiality, integrity, and availability.
What can be done if a fix is not available?
No vendor response or fixed release is identified. Restrict network access to the application and limit low-privilege accounts where possible, since exploitation requires authenticated low-level privileges.