CVE-2026-108114 | Strapi up to 5.57.0 Token Permission Reconciliation reconcileTokenPermissionsToUserCeiling privileges management

October 10, 2026 Yanac

A vulnerability was found in Strapi up to 5.57.0. It has been classified as problematic. This issue affects the function reconcileTokenPermissionsToUserCeiling of the component Token Permission Reconciliation. Performing a manipulation results in improper privilege management.

This vulnerability is identified as CVE-2026-108114. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More