news
Full Disclosure
October 27th, 2026 at 7:28 AM

SCHUTZWERK-SA-2025-002: Privilege escalation in Lobster_pro through request replaying

Posted by David Brown via Fulldisclosure on Oct 27 Privilege escalation via request replaying in Lobster_pro ========================================================= Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3. Metadata ======== - Affected product: Lobster_pro - Affected version: 4.12.12-LTS and...

#product

Get stories like this every Monday

The week's most important AI news in one email. Free, unsubscribe anytime.

Score: 2.92

Engagement proxy: 0

Canonical link: https://seclists.org/fulldisclosure/2026/Oct/35