{"id":"CVE-2026-95752","kind":"vulnerability","aliases":["CVE-2026-95752"],"related":[],"title":"HPE Networking Fabric Composer: local user can gain higher privileges","description":"A local privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow a low-privileged local attacker to elevate their privileges on the affected system.","summary":"A flaw in the API of HPE Networking Fabric Composer lets a low-privileged local user raise their privileges on the system. An attacker who already has a local account can gain administrative control of the affected host.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Fabric Composer","fixed":["7.4.1","7.3.5"],"affected":"<= 7.4.0, <= 7.3.4","ecosystem":"vendor"}],"ecosystems":[],"tags":["hpe-networking-fabric-composer","infrastructure","network-management"],"not_affected_if":["no-local-users"],"how_to_check":"Check the installed Fabric Composer version; versions 7.4.0 and below, or 7.3.4 and below, are affected (7.4.x needs 7.4.1+, 7.3.x needs 7.3.5+). End-of-support branches were not assessed by HPE and should be treated as potentially affected.","fix":"Upgrade HPE Networking Fabric Composer to 7.4.1 or later (7.4.x) or 7.3.5 or later (7.3.x); download from the HPE Networking Support Portal.","status":"open","published_at":"2026-11-03T20:18:23+00:00","first_seen_at":"2026-11-03T20:49:26+00:00","triaged_at":"2026-11-03T20:50:19+00:00","updated_at":"2026-11-03T20:53:04+00:00","category":"infrastructure","confidence":0.85,"triage":{"at":"2026-11-03T20:50:19Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"HPE Networking Fabric Composer: local user can gain higher privileges","impact":"high","summary":"A flaw in the API of HPE Networking Fabric Composer lets a low-privileged local user raise their privileges on the system. An attacker who already has a local account can gain administrative control of the affected host.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe-networking-fabric-composer","network-management"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"low-privileged local user becomes administrator on the host","analyst_note":"Check the HPE security bulletin for affected Fabric Composer versions and the fixed release; the NVD entry gives none.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-local-users"],"who_is_affected":"Teams running HPE Networking Fabric Composer on a host where more than one local user has an account. The sources do not list affected versions or configurations. Systems where only trusted administrators log in are less exposed.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000621,"input_tokens":4086,"output_tokens":424,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the HPE security bulletin for affected Fabric Composer versions and the fixed release; the NVD entry gives none.","search":"'-2026':12A,15A '-95752':13A,16A 'account':58B 'administr':61B 'affect':65B,97C 'allow':84C 'alreadi':54B 'api':32B,75C 'attack':52B,90C 'compos':4A,23B,37B,80C 'composer':18A 'control':62B 'could':83C 'cve':11A,14A 'elev':92C 'escal':70C 'exist':72C 'exploit':82C 'fabric':3A,17A,22B,36B,79C 'flaw':29B 'gain':8A,60B 'higher':9A 'host':66B 'hpe':1A,20B,34B,77C 'hpe-networking-fabric-compos':19B 'infrastructur':24B 'let':38B 'local':5A,43B,57B,68C,89C 'low':41B,87C 'low-privileg':40B,86C 'manag':27B 'network':2A,21B,26B,35B,78C 'network-manag':25B 'privileg':10A,42B,47B,69C,88C,94C 'rais':45B 'success':81C 'system':50B,98C 'user':6A,44B 'vulner':71C","nicknames":[],"mitigations":[],"who_affected":"Anyone running HPE Networking Fabric Composer 7.4.0 or below, or 7.3.4 or below. A low-privileged local attacker can use a flaw in the API to raise their privileges (HPE rates it High, CVSS 7.1). Hosts where only trusted administrators have local accounts are less exposed. HPE found it internally and knows of no public discussion or exploit code.","tier":"B","verified":{"fix":{"at":"2026-11-03T20:53:04Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1534},"products":{"at":"2026-11-03T20:53:04Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1534},"how_to_check":{"at":"2026-11-03T20:53:04Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1534},"who_affected":{"at":"2026-11-03T20:53:04Z","by":"analyst","doc":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","run_id":1534}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["composer","fabriccomposer"],"ptokens":["composer","fabric"],"labels":["high","hpenetworkingfabriccomposer","infrastructure","networkmanagement"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:23+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95752","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95752","severity":null,"published_at":"2026-11-03T20:18:23+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:26+00:00","fetched_at":"2026-11-03T20:49:26+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95752:1534","url":null,"severity":null,"published_at":"2026-11-03T20:53:04+00:00","modified_at":"2026-11-03T20:53:04+00:00","first_seen_at":"2026-11-03T20:53:04+00:00","fetched_at":"2026-11-03T20:53:04+00:00","note":"Read HPE advisory HPESBNW05172 (Nov 3 2026, CSAF text): affected 7.4.0 and below, 7.3.4 and below; fixed 7.4.1+, 7.3.5+; no known exploit/PoC; workaround restrict mgmt interfaces."}],"documents":[{"id":60639,"url":"https://csaf.arubanetworking.hpe.com/2026/hpe_networking_-_hpesbnw05172.txt","title":"HPESBNW05172 rev.1 - Multiple Vulnerabilities in HPE Networking Fabric Composer (AFC)","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}