Sherpa Orchestrator Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Sherpa Orchestrator version 141851. This issue allows low-privileged users to elevate their privileges by creating new users and roles. The vulnerability arises from inadequate user permission validation for most application requests, enabling unauthorized access control manipulation.

Impact

Exploitation of this vulnerability allows low-privileged users to gain elevated privileges, potentially leading to unauthorized access or actions within the application.