CVE-2026-11889 describes a privilege escalation vulnerability in SALTO ProAccess Space software related to its tenancy or logical partition feature. An authorized attacker could exploit this weakness to gain unauthorized access to any space managed by the affected product. The vulnerability is categorized under CWE-639, which involves improper authorization. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, requiring privileges but no user interaction, and impacting integrity without affecting confidentiality or availability. No vendor advisory or patch information is currently available.

An authorized attacker could escalate privileges to access spaces beyond their intended scope within the SALTO ProAccess Space system. This could lead to unauthorized modification or control over resources managed by the product, impacting data integrity. There is no indication of impact on confidentiality or availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to authorized users only and monitor for suspicious privilege escalations related to tenancy features. Avoid granting unnecessary privileges to users to reduce risk.