Skip to content
OpenAdvisories
Medium · 5.6 CVE-2026-3322 EUVD-2026-109944GHSA-7fg6-gvjw-377p

Privilege escalation via request replaying in Lobster_pro

Published Oct 26, 2026 · Updated Oct 27, 2026 · Assigned by SCHUTZWERK

Description

Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.

Affected products

VendorProductAffectedFixed
Lobster DATA Lobster_pro 4.12.12-LTS 25.1.3

References