This vulnerability in MarkLogic Server's REST API document patch operation allows an authenticated user with limited privileges to escalate their privileges improperly. Specifically, it enables execution of privileged operations against the Security database, which should be restricted. The issue affects versions 11.0.0 and 12.0.0 of MarkLogic Server. The CVSS v3.1 base score is 9.9, indicating a critical severity with network attack vector, low attack complexity, and no user interaction required. The vulnerability is categorized under CWE-269 (Improper Privilege Management). No official patch or remediation level has been provided yet.

An attacker with low-privileged REST API access can escalate privileges to execute high-impact operations on the Security database, potentially compromising confidentiality, integrity, and availability of the system. This could lead to full system compromise or unauthorized access to sensitive security configurations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the REST API to trusted users only and monitor for suspicious privilege escalation attempts. Follow vendor updates closely for an official fix.