{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-4052","assignerOrgId":"ed10eef1-636d-4fbe-9993-6890dfa878f8","state":"PUBLISHED","assignerShortName":"WSO2","dateReserved":"2026-03-12T15:04:40.532Z","datePublished":"2026-11-03T08:02:33.735Z","dateUpdated":"2026-11-03T08:02:33.735Z"},"containers":{"cna":{"providerMetadata":{"orgId":"ed10eef1-636d-4fbe-9993-6890dfa878f8","shortName":"WSO2","dateUpdated":"2026-11-03T08:02:33.735Z"},"title":"Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager)","problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-862","description":"CWE-862: Missing Authorization","type":"CWE"}]}],"impacts":[{"capecId":"CAPEC-58","descriptions":[{"lang":"en","value":"CAPEC-58: Restful Privilege Elevation"}]},{"capecId":"CAPEC-233","descriptions":[{"lang":"en","value":"CAPEC-233: Privilege Escalation"}]}],"affected":[{"vendor":"WSO2","product":"WSO2 API Manager","versions":[{"status":"affected","version":"4.1.0","versionType":"custom"},{"status":"affected","version":"4.2.0","versionType":"custom"},{"status":"affected","version":"4.3.0","versionType":"custom"},{"status":"affected","version":"4.4.0","versionType":"custom"},{"status":"affected","version":"4.5.0","versionType":"custom"},{"status":"affected","version":"4.6.0","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"WSO2","product":"WSO2 API Control Plane","versions":[{"status":"affected","version":"4.5.0","versionType":"custom"},{"status":"affected","version":"4.6.0","versionType":"custom"}],"defaultStatus":"unaffected"},{"vendor":"WSO2","product":"WSO2 Identity Server Key Manager Connector (apim-km-wso2is)","packageName":"org.wso2.km.ext.wso2is:wso2is.key.manager.core","versions":[{"status":"affected","version":"0","lessThan":"1.8.8","versionType":"custom"}],"defaultStatus":"unaffected"}],"descriptions":[{"lang":"en","value":"This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obtaining a token from the WSO2 Identity Server token endpoint.","supportingMedia":[{"type":"text/html","base64":false,"value":"This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obtaining a token from the WSO2 Identity Server token endpoint."}]}],"references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5212/","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"CRITICAL","baseScore":9.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}],"solutions":[{"lang":"en","value":"Follow the instructions given on https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5212/#solution","supportingMedia":[{"type":"text/html","base64":false,"value":"<span style=\"background-color: transparent;\">Follow the instructions given on </span><a target=\"_blank\" rel=\"nofollow\" href=\"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5212/#solution\"><span style=\"background-color: transparent;\">https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5212/#solution</span></a> <br>"}]}],"source":{"advisory":"WSO2-2026-5212","discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}}}}