CVE-2026-34023 describes an incorrect authorization vulnerability (CWE-863) in Wertheim GmbH's SafeController Software for vault rooms. The flaw exists in the WebSocket communication of the SafeController WebMessageBroker, where an authenticated attacker with low-privileged branch user credentials can manipulate messages to specify controller identifiers belonging to other branches. This bypasses branch-level access controls, enabling the attacker to perform unauthorized actions such as activating boxes in branches they are not authorized to access. The vulnerability affects AssemblyVersion 6.15.8328.28014. No patch or official remediation has been documented yet. The CVSS 4.0 base score is 7.1 (high severity), reflecting network attack vector, low attack complexity, no user interaction, and high impact on integrity and availability.

An attacker with valid low-privileged credentials can escalate their access across branch boundaries, potentially compromising the security of safe deposit boxes in other branches. This could lead to unauthorized activation of boxes and access to restricted vault resources, undermining the physical security controls enforced by the software.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the SafeController WebMessageBroker interface to trusted users only and monitor for suspicious activity involving cross-branch controller identifiers. No official fix or temporary workaround has been documented at this time.