CVE-2026-92761: Missing Authorization in retspen webvirtcloud
WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power off virtual machines, reset root passwords, install SSH keys, and manage ISO images by exploiting the get_instance gate that only checks grant existence.
AI Analysis
Technical Summary
WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing users with read-only access to perform privileged operations. The vulnerability arises from the get_instance gate checking only for the existence of a grant rather than the specific permissions assigned. This flaw enables unauthorized actions including powering off virtual machines, resetting root passwords, installing SSH keys, and managing ISO images by attackers who should only have view access.
Potential Impact
Attackers with read-only grants can escalate their privileges to perform critical administrative actions on virtual machines, potentially disrupting services, compromising system integrity, and gaining unauthorized access to sensitive credentials and configurations.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict user grants to trusted users only and monitor for suspicious activity related to virtual machine management. Avoid granting view-only permissions broadly as they may be abused due to this vulnerability.
CVE-2026-92761: Missing Authorization in retspen webvirtcloud
Description
WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing view-only users to perform privileged actions. Attackers with read-only grants can power off virtual machines, reset root passwords, install SSH keys, and manage ISO images by exploiting the get_instance gate that only checks grant existence.
CVSS v4.0
Score 8.7high
Affected software
retspen
webvirtcloud
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
WebVirtCloud fails to properly validate permission flags in UserInstance grants, allowing users with read-only access to perform privileged operations. The vulnerability arises from the get_instance gate checking only for the existence of a grant rather than the specific permissions assigned. This flaw enables unauthorized actions including powering off virtual machines, resetting root passwords, installing SSH keys, and managing ISO images by attackers who should only have view access.
Potential Impact
Attackers with read-only grants can escalate their privileges to perform critical administrative actions on virtual machines, potentially disrupting services, compromising system integrity, and gaining unauthorized access to sensitive credentials and configurations.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict user grants to trusted users only and monitor for suspicious activity related to virtual machine management. Avoid granting view-only permissions broadly as they may be abused due to this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-16T19:06:20.513Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6aab005f55bf5e2cf5231df4
Added to database: 09/16/2026, 20:47:27 UTC
Last enriched: 09/16/2026, 22:01:43 UTC
Last updated: 09/17/2026, 02:02:58 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.