{"id":"CVE-2026-109329","summary":"Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-Organization Access Control Bypass via members_assignment.php","details":"Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations. Attackers can submit crafted assign requests to members_assignment.php with a foreign role UUID to gain privileged membership, log into that organization, and edit its user profiles.","aliases":["GHSA-ggch-5cpv-rvqx"],"modified":"2026-10-13T02:46:44.820900665Z","published":"2026-10-12T16:05:19.232Z","database_specific":{"cwe_ids":["CWE-639"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109329.json","cna_assigner":"VulnCheck"},"references":[{"type":"ADVISORY","url":"https://github.com/Admidio/admidio/security/advisories/GHSA-ggch-5cpv-rvqx"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109329.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109329"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/admidio-4.3.2-through-4.3.17-and-5.0.0-before-5.0.15-cross-organization-access-control-bypass-via-members-assignment-php"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/admidio/admidio","events":[{"introduced":"f89cf54da2e1dca5b2655657b320cd1d88a7c16d"},{"last_affected":"fde81ae869e88a3cf42201f2548d57df785a37cb"},{"introduced":"59b4888d2be8acb9801f3024258663f7a787518c"},{"fixed":"929684e27d40eadf18c93e6725807d208d54b2ce"}],"database_specific":{"extracted_events":[{"introduced":"4.3.2"},{"last_affected":"4.3.17"},{"introduced":"5.0.0"},{"fixed":"5.0.15"}],"source":"AFFECTED_FIELD"}}],"versions":["v5.0.14","v5.0.13","v5.0.12","v5.0.10","v5.0.9","v5.0.8","v5.0.7","v5.0.6","v5.0.5","v5.0.4","v34","v5.0.3","v5.0.2","v5.0.1","v5.0.0","v4.3.17","v4.3.16","v4.3.15","v4.3.14","v4.3.13","v4.3.12","v4.3.11","v4.3.10","v4.3.9","v4.3.8","v4.3.7","v4.3.6","v4.3.5","v4.3.4","v4.3.3","v4.3.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-109329.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N"}]}