CVE-2026-5712 — IdentityIQ Role Editor Incorrect Authorization Vulnerability

CVE-2026-5712

IdentityIQ Role Editor Incorrect Authorization Vulnerability PUBLISHED

Description (CNA)

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing.

Affected (CNA)

Vendor / product	Versions
SailPoint Technologies / IdentityIQ	affected 8.5 before 8.5p2; affected 8.4 before 8.4p4; affected 8.3 before 8.3p5

CWE

CWE-863

References

https://www.sailpoint.com/security-advisories/sailpoint-identityiq-role-editor-incorrect-authorization-vulnerability-cve-2026-5712

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.