Skip to content
OpenAdvisories

Vendor

Curiosity

1 known vulnerabilities.

Products

Curiosity Workspace 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-88817

    Privilege escalation via legacy access group creation endpoint

    An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitation or approval. It did not grant application-wide administrator privileges, and the vulnerability cou…

    Curiosity Curiosity Workspace