This vulnerability (CVE-2026-7327) in Progress MarkLogic Server's REST API document processing pipeline allows an authenticated user holding an administrative REST role to escalate their privileges improperly. The flaw is due to improper privilege management (CWE-269) and affects MarkLogic Server versions 11.0.0 and 12.0.0. Exploitation can result in unauthorized disclosure of sensitive data that should only be accessible to users with higher privileges. The CVSS v3.1 score is 8.1, indicating high severity, with network attack vector, low attack complexity, high privileges required, and user interaction needed. The vulnerability is published and known exploits in the wild are not reported. No official patch or remediation level has been provided yet.

An attacker with an administrative REST role can escalate privileges beyond their intended scope, potentially accessing sensitive server-side data that should be restricted to higher-privileged users. This unauthorized disclosure can compromise confidentiality of critical information stored or processed by the MarkLogic Server.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict administrative REST role assignments to trusted users only and monitor for suspicious privilege escalation attempts. Follow vendor updates closely for any released patches or mitigations.