{"id":"CVE-2026-58978","kind":"vulnerability","aliases":["CVE-2026-58978"],"related":[],"title":"Unnamed product: logic error lets a permission check be bypassed","description":"In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.","summary":"A logic error in multiple code locations allows a permission check to be bypassed. The description says this could lead to privilege escalation with no extra execution privileges and no user interaction, but it does not name the affected product.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-02T20:17:53+00:00","first_seen_at":"2026-11-02T20:35:35+00:00","triaged_at":"2026-11-02T20:37:15+00:00","updated_at":"2026-11-02T20:37:15+00:00","category":"other","confidence":0.2,"triage":{"at":"2026-11-02T20:37:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Unnamed product: logic error lets a permission check be bypassed","impact":"medium","summary":"A logic error in multiple code locations allows a permission check to be bypassed. The description says this could lead to privilege escalation with no extra execution privileges and no user interaction, but it does not name the affected product.","audience":"businesses","category":"other","nicknames":[],"who_cares":[],"confidence":0.2,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown privilege escalation; the affected product is not named","analyst_note":"Identify the affected product and versions from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-58978; the description names no product.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000583,"input_tokens":4073,"output_tokens":351,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-58978':13A,16A 'addit':84C 'affect':55B 'allow':24B 'bypass':10A,30B,65C 'check':8A,27B 'code':22B,73C 'could':35B,75C 'cve':11A,14A 'descript':32B 'due':66C 'error':4A,19B,70C 'escal':39B,79C 'execut':43B,85C 'exploit':94C 'extra':42B 'interact':48B,89C 'lead':36B,76C 'let':5A 'locat':23B,59C 'logic':3A,18B,69C 'multipl':21B,58C 'name':53B 'need':87C,92C 'permiss':7A,26B,64C 'physic':78C 'possibl':63C 'privileg':38B,44B,81C,86C 'product':2A,56B 'say':33B 'unnam':1A 'user':47B,88C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["other","unknown"],"first_public_at":"2026-11-02T20:17:53+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-58978","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-58978","severity":null,"published_at":"2026-11-02T20:17:53+00:00","modified_at":"2026-11-02T20:17:53+00:00","first_seen_at":"2026-11-02T20:35:35+00:00","fetched_at":"2026-11-02T20:35:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}