LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint. (CVE-2026-65931)

The vulnerability in LimeSurvey Community Edition 7.0.5 (CVE-2026-65931) involves improper authorization in the POST /index.php/admin/menuentries/sa/create endpoint. Authenticated users with limited permissions (global settings:read) can bypass intended privilege checks and create survey menu entries without having the required settings:update permission. Additionally, the endpoint permits submission of menu IDs normally restricted to superadministrators, enabling unauthorized modification of administrative navigation entries. This is classified as CWE-862 (Improper Authorization).

An attacker with authenticated access and minimal permissions can escalate their ability to modify administrative navigation menus, potentially altering the survey interface or navigation structure in unauthorized ways. This could lead to confusion, privilege escalation vectors, or unauthorized access to administrative functions depending on how the menu entries are leveraged. There are no known exploits in the wild reported for this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to authenticated users and review permissions carefully to limit exposure. Monitor vendor channels for updates or official patches addressing this authorization flaw.