CVE-2026-42185

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-42185", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-25T01:53:21.583Z", "datePublished": "2026-05-08T19:23:00.699Z", "dateUpdated": "2026-05-08T19:53:16.358Z"}, "containers": {"cna": {"title": "People: Privilege Escalation via Missing Role Ceiling in Mail Domain Invitation", "problemTypes": [{"descriptions": [{"cweId": "CWE-269", "lang": "en", "description": "CWE-269: Improper Privilege Management", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/suitenumerique/people/security/advisories/GHSA-42cf-rv2h-v8rf", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/suitenumerique/people/security/advisories/GHSA-42cf-rv2h-v8rf"}, {"name": "https://github.com/suitenumerique/people/commit/6a51b96d8e907483fa8fc489d8714cc35fb4099b", "tags": ["x_refsource_MISC"], "url": "https://github.com/suitenumerique/people/commit/6a51b96d8e907483fa8fc489d8714cc35fb4099b"}, {"name": "https://github.com/suitenumerique/people/releases/tag/v1.25.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/suitenumerique/people/releases/tag/v1.25.0"}], "affected": [{"vendor": "suitenumerique", "product": "people", "versions": [{"version": "< 1.25.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-08T19:23:00.699Z"}, "descriptions": [{"lang": "en", "value": "People is an application to handle users and teams, and distribute permissions across La Suite. Prior to version 1.25.0, a user holding the Administrator role on a mail domain could send a crafted invitation request to promote any existing user (including users with no current domain access) to the Owner role. The exploit requires a single authenticated HTTP request and grants full domain ownership immediately, without any acceptance step from the target. This issue has been patched in version 1.25.0."}], "source": {"advisory": "GHSA-42cf-rv2h-v8rf", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/suitenumerique/people/security/advisories/GHSA-42cf-rv2h-v8rf", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-08T19:52:50.446848Z", "id": "CVE-2026-42185", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-08T19:53:16.358Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-42185", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-08T19:52:50.446848Z"}}}], "references": [{"url": "https://github.com/suitenumerique/people/security/advisories/GHSA-42cf-rv2h-v8rf", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-08T19:53:11.320Z"}}], "cna": {"title": "People: Privilege Escalation via Missing Role Ceiling in Mail Domain Invitation", "source": {"advisory": "GHSA-42cf-rv2h-v8rf", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "suitenumerique", "product": "people", "versions": [{"status": "affected", "version": "< 1.25.0"}]}], "references": [{"url": "https://github.com/suitenumerique/people/security/advisories/GHSA-42cf-rv2h-v8rf", "name": "https://github.com/suitenumerique/people/security/advisories/GHSA-42cf-rv2h-v8rf", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/suitenumerique/people/commit/6a51b96d8e907483fa8fc489d8714cc35fb4099b", "name": "https://github.com/suitenumerique/people/commit/6a51b96d8e907483fa8fc489d8714cc35fb4099b", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/suitenumerique/people/releases/tag/v1.25.0", "name": "https://github.com/suitenumerique/people/releases/tag/v1.25.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "People is an application to handle users and teams, and distribute permissions across La Suite. Prior to version 1.25.0, a user holding the Administrator role on a mail domain could send a crafted invitation request to promote any existing user (including users with no current domain access) to the Owner role. The exploit requires a single authenticated HTTP request and grants full domain ownership immediately, without any acceptance step from the target. This issue has been patched in version 1.25.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269: Improper Privilege Management"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-08T19:23:00.699Z"}}}, "cveMetadata": {"cveId": "CVE-2026-42185", "state": "PUBLISHED", "dateUpdated": "2026-05-08T19:53:16.358Z", "dateReserved": "2026-04-25T01:53:21.583Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-05-08T19:23:00.699Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "people", "vendor": "suitenumerique", "versions": [{"status": "affected", "version": "< 1.25.0"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "People is an application to handle users and teams, and distribute permissions across La Suite. Prior to version 1.25.0, a user holding the Administrator role on a mail domain could send a crafted invitation request to promote any existing user (including users with no current domain access) to the Owner role. The exploit requires a single authenticated HTTP request and grants full domain ownership immediately, without any acceptance step from the target. This issue has been patched in version 1.25.0."}, {"lang": "es", "value": "People es una aplicaci\u00f3n para gestionar usuarios y equipos, y distribuir permisos en La Suite. Antes de la versi\u00f3n 1.25.0, un usuario con el rol de Administrador en un dominio de correo pod\u00eda enviar una solicitud de invitaci\u00f3n manipulada para ascender a cualquier usuario existente (incluidos usuarios sin acceso actual al dominio) al rol de Propietario. El exploit requiere una \u00fanica solicitud HTTP autenticada y otorga la propiedad total del dominio inmediatamente, sin ning\u00fan paso de aceptaci\u00f3n por parte del objetivo. Este problema ha sido parcheado en la versi\u00f3n 1.25.0."}], "id": "CVE-2026-42185", "lastModified": "2026-10-26T18:10:00.173", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 4.2, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42185", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-08T19:52:50.446848Z", "version": "2.0.3"}}]}, "published": "2026-05-08T20:16:31.290", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/suitenumerique/people/commit/6a51b96d8e907483fa8fc489d8714cc35fb4099b"}, {"source": "security-advisories@github.com", "url": "https://github.com/suitenumerique/people/releases/tag/v1.25.0"}, {"source": "security-advisories@github.com", "url": "https://github.com/suitenumerique/people/security/advisories/GHSA-42cf-rv2h-v8rf"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/suitenumerique/people/security/advisories/GHSA-42cf-rv2h-v8rf"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.25.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "people", "vendor": "suitenumerique"}], "created": "2026-05-08T20:30:16.037861+00:00", "updated": "2026-05-10T21:24:54.814052+00:00", "vendors": ["suitenumerique", "suitenumerique$PRODUCT$people"]}