This vulnerability in Progress MarkLogic Server allows an authenticated user with low-privileged REST roles to escalate privileges to administrator via the SQL, SPARQL, and Optic REST query interfaces. This improper privilege management flaw enables unauthorized execution of privileged operations and access to sensitive data. It affects versions 11.0.0 and 12.0.0 of MarkLogic Server. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, and high impact on confidentiality, integrity, and availability. The vendor has not provided an official fix or remediation level yet, and no known exploits have been reported.

Successful exploitation allows an authenticated low-privileged user to escalate to administrator privileges, leading to unauthorized execution of privileged operations and unauthorized access to sensitive data. This compromises confidentiality, integrity, and availability of the affected MarkLogic Server instances.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the REST query interfaces to trusted users only and monitor for suspicious privilege escalation attempts. Avoid granting low-privileged REST roles to untrusted users.