Access Control Vulnerability in Proxmox Virtual Environment 9.x and 8.x
CVE-2026-51083

6.5MEDIUM

Key Information:

Vendor

Proxmox

Status
Proxmox Virtual Environment
Vendor
CVE Published:
17 July 2026

What is CVE-2026-51083?

An access control flaw in Proxmox Virtual Environment versions 9.x prior to 9.1.8 and 8.x prior to 8.4.8 allows limited privilege users to access hashed passwords through the cloudinit/dump API. This can lead to unauthorized access and potential compromise of sensitive information. Proper security measures should be employed to mitigate the risks associated with this vulnerability.

References

https://forum.proxmox.com/threads/proxmox-virtual-environ...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.