This vulnerability (CVE-2026-9193) in Progress Software Corporation's MarkLogic Server involves improper privilege management (CWE-269) within its Hadoop integration component. Specifically, authenticated users assigned low-privileged Hadoop roles can escalate their privileges to perform privileged operations on the Security database. The flaw affects MarkLogic Server versions 11.0.0 and 12.0.0. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, scope change, and high impact on confidentiality, integrity, and availability. The vendor has not yet published an official fix or remediation level, and no known exploits have been reported in the wild.

Successful exploitation allows an authenticated low-privileged Hadoop user to escalate privileges and execute privileged operations on the Security database, potentially compromising the entire security context of the MarkLogic Server. This can lead to full system compromise, data confidentiality breaches, data integrity violations, and denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to authenticated Hadoop users with low privileges and monitor for suspicious activity related to privilege escalation attempts.