Description
Webmin through 2.670 contains a privilege escalation vulnerability in acl/save_group.cgi that allows delegated administrators to grant unauthorized modules by submitting arbitrary module lists in the mod parameter. Attackers with Webmin Users module access can create or edit groups holding modules like Command Shell and assign themselves membership to execute commands as root.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| webmin | webmin | ≤ 2.670 | — |
Advisories 1
- WID-SEC-2026-4529 Webmin: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026
References
- https://github.com/webmin/webmin/commit/c861e308f4ee4cff1795ccc7621fc75623e1bb90 patch
- https://github.com/webmin/webmin/commit/be54ba38c3b86a3647a62327e1de81d5d0db098a patch
- https://github.com/webmin/webmin/blob/2.670/acl/save_group.cgi#L83 technical-description
- VulnCheck Advisory: Webmin through 2.670 Privilege Escalation via acl/save_group.cgi third-party-advisory