Role Escalation Vulnerability in People Application by Suite Numérique
CVE-2026-42185

5.5MEDIUM

Key Information:

Vendor: Suitenumerique
Status: People
Vendor: CVE Published:; 8 May 2026

🔔 Create Suitenumerique Vulnerability Alert

What is CVE-2026-42185?

The People application by Suite Numérique has a vulnerability that allows an authenticated user with Administrative privileges to issue a malicious invitation that can promote any existing user to the Owner role. This can grant full control over the domain immediately, without any confirmation from the targeted user. This issue has been resolved in version 1.25.0, emphasizing the need for users to update promptly to prevent unauthorized privilege escalations.