CVE-2026-103470

Internet2 / Grouper PUBLISHED

Description (CNA)

In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges.

Affected (CNA)

Vendor / product	Versions
Internet2 / Grouper	affected 5.8.3 through 5.22.5; affected 6.0.0 before 6.4.1; affected 7.0.0 before 7.5.1

CWE

CWE-266

References

https://docs.grouper.internet2.edu/wiki/spaces/Grouper/pages/240549893/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.