Privilege Escalation Vulnerability in mpGabinet by mpGabinet

CVE-2026-40550

What is CVE-2026-40550?

mpGabinet is susceptible to a privilege escalation vulnerability due to excessive database privileges assigned to the user utilized by the application. Attackers with access to any instance of the application connected to the backend can extract sensitive database credentials from the application's memory by examining the running process. Although retrieving credentials from memory is typically expected behavior, the exposed credentials provide administrative access to the database, which greatly exceeds the necessary privileges for normal application operations. This vulnerability might allow attackers to perform unauthorized actions outside the application's designated interface.

References