TI-2025-34367 CVE-2025-54596 · GHSA-m9pp-ghmm-cm9m
Incorrect authorization in Abnormal Security
Priority LOW 20
Abnormal Security /v1.0/rbac/users_v2/{USER_ID}/ before 2025-02-19 allows downgrading the privileges of other user accounts.
Abnormal AI
Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Abnormal AI records in CISA KEVNo Abnormal AI vulnerabilities are listed in CISA KEV.
Records
1 record