Description
Incorrect access control in the impworks Bonsai v6.0 allows authenticated attackers with Editor privileges to escalate privileges to Administrator and execute unauthorized account, password, and configuration changes.
High · 8.1
CVE-2026-50881
EUVD-2026-36779GHSA-f64f-jmg7-95mg
Incorrect access control in the impworks Bonsai v6.0 allows authenticated attackers with Editor privileges to escalate privileges to Admini…
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by mitre