CVE-2026-51083: Medium severity Proxmox Proxmox Virtual Environment (PVE) vulnerability
Published Jul 17, 2026
·Updated
Incorrect access control in Proxmox Virtual Environment (PVE) 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users within limited privileges to obtain hashed passwords via the cloudinit/dump API.
Affected Software
1 affected component
Proxmox Proxmox Virtual Environment (PVE)>9.0.0<=9.1.8, <8.4.8
Event History
Jul 17, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-51083?
CVE-2026-51083 has a medium severity rating of 6.5 according to the CVSS 3.1 scoring system.
2
How do I fix CVE-2026-51083?
To fix CVE-2026-51083, upgrade Proxmox Virtual Environment to version 9.1.8 or 8.4.8 or later.
3
What type of vulnerability is CVE-2026-51083?
CVE-2026-51083 is an access control vulnerability that allows unauthorized users to obtain hashed passwords.
4
Which versions of Proxmox are affected by CVE-2026-51083?
CVE-2026-51083 affects Proxmox Virtual Environment 9.x prior to 9.1.8 and 8.x prior to 8.4.8.
5
What can attackers do with CVE-2026-51083?
Attackers with limited privileges can exploit CVE-2026-51083 to access hashed passwords through the cloudinit/dump API.