---
id: "CVE-2026-58978"
kind: "vulnerability"
aliases: ["CVE-2026-58978"]
title: "Unnamed product: logic error lets a permission check be bypassed"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["other"]
not_affected_if: []
published_at: "2026-11-02T20:17:53+00:00"
first_seen_at: "2026-11-02T20:35:35+00:00"
updated_at: "2026-11-02T20:37:15+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58978", "first_seen_at": "2026-11-02T20:35:35+00:00"}]
---

# Unnamed product: logic error lets a permission check be bypassed

A logic error in multiple code locations allows a permission check to be bypassed. The description says this could lead to privilege escalation with no extra execution privileges and no user interaction, but it does not name the affected product.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-02T20:35:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-58978

## From the sources

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_