Description
Abnormal Security /v1.0/rbac/users_v2/{USER_ID}/ before 2025-02-19 allows downgrading the privileges of other user accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Abnormal AI | Abnormal Security | 1.0 – < 2025-02-19 | 2025-02-19 |
Medium · 4.3
CVE-2025-54596
EUVD-2025-22730GHSA-m9pp-ghmm-cm9m
Abnormal Security /v1.0/rbac/users_v2/{USER_ID}/ before 2025-02-19 allows downgrading the privileges of other user accounts.
Published Jul 25, 2025 · Updated Jul 25, 2025 · Assigned by mitre