storyden vulnerabilities

1 known vulnerability in storyden from Southclaws. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  storyden: Improper Privilege Management

  CVE-2026-125360Nov 10, 2026Southclaws

  Storyden through 1.26.16 contains a privilege escalation vulnerability that allows users holding MANAGE_ROLES to grant the ADMINISTRATOR permission without being administrators. Attackers can call AccountAddRole on another controlled account or use RoleCreate