Improper Privilege Management in LaraDashboard By Editing or Renaming Roles

CVE-2026-105126

What is CVE-2026-105126?

LaraDashboard, prior to version 1.4.8, contains a vulnerability that permits authenticated Admin users to escalate their privileges to Superadmin levels. This is achieved by allowing users with editing rights to rename their roles or manipulate other roles, enabling them to gain unauthorized access to sensitive functionalities, including core upgrades and module installations. Such misconfigurations pose significant security risks, as attackers can leverage these privileges for malicious activities, including code execution and account takeover.

References