CVE-2026-107484: Input Validation Vulnerability in Gaia Portal backend handlers allows privilege escalation by an authenticated user
An input and authorization validation vulnerability in Gaia Portal backend handlers could allow an authenticated, non-administrative user to perform privileged operations that should be restricted to administrators.
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated, non-administrative Gaia Portal user can exploit it. The attack vector is adjacent network, so the attacker must be able to access the affected portal through that network path.
What level of access can an attacker gain?
The vulnerability may let a non-administrative user perform operations that should be limited to administrators. It affects confidentiality and integrity, while no availability impact is identified in the provided severity vector.
Is user interaction required?
No. The severity vector indicates that exploitation does not require user interaction, but it does require low-level privileges because the attacker must already be authenticated.