CVE-2026-61850 - Kargo: Privilege escalation via Project RBAC management in the Kargo API
CVE ID :CVE-2026-61850 Published : Oct. 30, 2026, 8:17 p.m. | 1 hour, 44 minutes ago Description :Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authorization flaws in the `project-scoped RBAC API` let an authenticated user...