{"id":"CVE-2026-119654","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-119654","summary":"DataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorization","details":"DataCap through 2025.1.1 contains a missing authorization vulnerability that allows any authenticated user to escalate privileges by calling administrative role and menu management APIs. Attackers, including self-registered accounts, can send PUT requests to /api/v1/user/allocationRole to assign themselves the administrator role and gain full control of the instance.","published":"2026-10-30T14:16:16.982Z","modified":"2026-10-31T02:47:47.458941064Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/119xxx/CVE-2026-119654.json"},{"type":"PACKAGE","url":"https://github.com/devlive-community/metaforge"},{"type":"ARTICLE","url":"https://github.com/devlive-community/metaforge/blob/2025.1.1/core/datacap-security/src/main/java/io/edurt/datacap/security/SecurityConfigure.java#L63-L78"},{"type":"ARTICLE","url":"https://github.com/devlive-community/metaforge/blob/2025.1.1/core/datacap-server/src/main/java/io/edurt/datacap/server/controller/admin/RoleController.java#L34-L52"},{"type":"ARTICLE","url":"https://github.com/devlive-community/metaforge/blob/2025.1.1/core/datacap-server/src/main/java/io/edurt/datacap/server/controller/user/UserController.java#L97-L108"},{"type":"ARTICLE","url":"https://github.com/devlive-community/metaforge/blob/2025.1.1/core/datacap-service/src/main/java/io/edurt/datacap/service/service/impl/UserServiceImpl.java#L104-L137"},{"type":"REPORT","url":"https://github.com/devlive-community/metaforge/issues/969"},{"type":"ADVISORY","url":"https://hackmd.io/@hieuPenguinnn/metaforge-datacap-allocation-role-missing-authz-privilege-escalation"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119654"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/datacap-through-2025.1.1-privilege-escalation-via-allocationrole-missing-authorization"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-31T02:47:47.458941064Z"}}