CVE-2026-53625: CWE-862: Missing Authorization in glpi-project glpi
GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, a technician can manipulate the authtype value through the API to change another user's authentication method. Under configurations using the legacy API REST interface or SSO logins, this can change a super-administrator's authentication method and enable account takeover. This issue is fixed in versions 11.0.8 and 10.0.26.
AI Analysis
Technical Summary
CVE-2026-53625 is a missing authorization vulnerability (CWE-862) in GLPI, a free asset and IT management software. From versions 0.70 until 10.0.26 and 11.0.0 until 11.0.8, a user with technician privileges can manipulate the authtype value through the API. This manipulation can change another user's authentication method, including that of super-administrators, under legacy REST API or SSO login configurations. This flaw can enable an attacker to take over privileged accounts by altering authentication methods. The vulnerability is resolved in GLPI versions 10.0.26 and 11.0.8.
Potential Impact
An attacker with technician-level privileges can exploit this vulnerability to change the authentication method of other users, including super-administrators, potentially leading to account takeover. This elevates the attacker's control within the system, compromising confidentiality and integrity of administrative accounts. The vulnerability affects configurations using the legacy REST API or SSO logins.
Mitigation Recommendations
This vulnerability is fixed in GLPI versions 10.0.26 and 11.0.8. Users should upgrade to these versions or later to remediate the issue. No additional mitigations are specified by the vendor advisory.
CVE-2026-53625: CWE-862: Missing Authorization in glpi-project glpi
Description
GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, a technician can manipulate the authtype value through the API to change another user's authentication method. Under configurations using the legacy API REST interface or SSO logins, this can change a super-administrator's authentication method and enable account takeover. This issue is fixed in versions 11.0.8 and 10.0.26.
CVSS v4.0
Score 7.5high
Affected software
glpi-project
glpi
pkg:github/glpi-project/glpiRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-53625 is a missing authorization vulnerability (CWE-862) in GLPI, a free asset and IT management software. From versions 0.70 until 10.0.26 and 11.0.0 until 11.0.8, a user with technician privileges can manipulate the authtype value through the API. This manipulation can change another user's authentication method, including that of super-administrators, under legacy REST API or SSO login configurations. This flaw can enable an attacker to take over privileged accounts by altering authentication methods. The vulnerability is resolved in GLPI versions 10.0.26 and 11.0.8.
Potential Impact
An attacker with technician-level privileges can exploit this vulnerability to change the authentication method of other users, including super-administrators, potentially leading to account takeover. This elevates the attacker's control within the system, compromising confidentiality and integrity of administrative accounts. The vulnerability affects configurations using the legacy REST API or SSO logins.
Mitigation Recommendations
This vulnerability is fixed in GLPI versions 10.0.26 and 11.0.8. Users should upgrade to these versions or later to remediate the issue. No additional mitigations are specified by the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-06-09T20:16:59.647Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ab6c1fff7a7c54106255626
Added to database: 09/25/2026, 18:48:31 UTC
Last enriched: 09/25/2026, 19:02:51 UTC
Last updated: 09/26/2026, 02:43:21 UTC
Views: 11
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.