CVE-2026-76079
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
Nov 11, 2026
Vendor
unknown
Description
Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams. Prior to version 0.224.0, an organization ADMIN can mint an OWNER membership via createUser, bypassing the owner-only set-owner authorization gate. This issue has been patched in version 0.224.0.