Skip to content
OpenAdvisories
High · 7.2 CVE-2026-76079 EUVD-2026-123668

Probo: Vertical privilege escalation

Published Nov 11, 2026 · Updated Nov 12, 2026 · Assigned by GitHub_M

Description

Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Prior to version 0.224.0, an organization ADMIN can mint an OWNER membership via createUser, bypassing the owner-only set-owner authorization gate. This issue has been patched in version 0.224.0.

Affected products

VendorProductAffectedFixed
getprobo probo < 0.224.0 —

References