CVE-2026-4548 Details
Description
A vulnerability was detected in mickasmt next-saas-stripe-starter 1.0.0. Affected by this vulnerability is the function updateUserrole of the file actions/update-user-role.ts. The manipulation of the argument userId/role results in improper authorization. The attack may be launched remotely.
A critical vulnerability exists in mickasmt next-saas-stripe-starter version 1.0.0, specifically within the updateUserRole function in actions/update-user-role.ts. This vulnerability allows any authenticated user to escalate their privileges to ADMIN by manipulating the userId and role arguments. The issue arises because the authorization check only verifies if the user is modifying their own record, enabling users to grant themselves admin rights. The vulnerability can be exploited remotely.
It is recommended to remove the updateUserRole action and the UserRoleForm component from the application. Role modifications should be restricted to a dedicated admin-only action that verifies the user's admin status and targets different users for role updates.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Mar 22, 2026CISA-ADP
Assessed Mar 23, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://vuldb.com/?ctiid.352375 | [email protected] | Content Wall |
| https://vuldb.com/?id.352375 | [email protected] | AdvisoryPartial Content |
| https://vuldb.com/?submit.774805 | [email protected] | ExploitTechnical Description |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-266 | Incorrect Privilege Assignment | [email protected] |
| CWE-285 | Improper Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mickasmt next-saas-stripe-starter | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 22, 2026 | New CVE Received | [email protected] |