← Database

CVE-2026-76079

HIGH CVSS: 7.2 Published: 2026-11-11 Modified: 2026-11-11

Description

Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Prior to version 0.224.0, an organization ADMIN can mint an OWNER membership via createUser, bypassing the owner-only set-owner authorization gate. This issue has been patched in version 0.224.0.

Affected Platforms

Unknown

Weakness Type

CWE-269, CWE-863

References