Web-based Process Visualization Software Vulnerability in FUXA by Frango Team

CVE-2026-67442

What is CVE-2026-67442?

FUXA, a web-based Process Visualization software, has a vulnerability that affects its role management system. Prior to version 1.3.3, when a role is deleted via the API, the role identifier remains in the user’s information and cache. This means that if an old permission configuration still uses that identifier, a user might retain permissions that were intended to be revoked. This flaw can lead to residual privileges, inconsistent access control, and misleading audit results, undermining the overall security integrity of the application.

References