Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue… (CVE-2026-110373)

CVE-2026-110373 describes an Incorrect Privilege Assignment vulnerability in the Login with phone number component by Hamid Alinia, which allows an attacker to escalate privileges. The affected versions include all versions up to 1.8.77. The vulnerability is characterized by improper assignment of privileges, enabling unauthorized privilege escalation. The CVSS 3.1 base score is 8.1, reflecting a network attack vector with high attack complexity, no privileges required, no user interaction, and impacts to confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to escalate privileges within the affected system, potentially leading to full compromise of confidentiality, integrity, and availability of the system. The high CVSS score indicates significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restrict access to the affected component and monitor for suspicious activity related to privilege escalation attempts.