Improper Privilege Management in aiyiyi121 SxDevOps
CVE-2026-93968

5.1MEDIUM

Key Information:

Vendor

Aiyiyi121

Status
Sxdevops
Vendor
CVE Published:
20 September 2026

What is CVE-2026-93968?

In aiyiyi121 SxDevOps versions 1.0 and 1.1, a vulnerability exists within the UserSerializer component, specifically in the update function of backend/rbac/serializers.py. This flaw can allow an attacker to manipulate permissions, which leads to improper privilege management. The attack can be executed remotely, making it critical for users of the affected versions to apply the necessary patch (commit 2b4bf8585c3e731e7a8af30801ea46680bc783f9) promptly to mitigate this risk. The vendor has been responsive in addressing this issue, providing a timely fix.

Affected Version(s)

SxDevOps 1.0

SxDevOps 1.1

References

https://vuldb.com/vuln/407927
vdb-entrytechnical-description
https://vuldb.com/vuln/407927/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-93968
third-party-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

_lxf (VulDB User)
VulDB CNA Team
.