CVE-2026-88817
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 16, 2026
Vendor
unknown
Description
An authenticated, non-guest user of Curiosity Workspace could enroll themselves as an administrator and member of an existing access group without an invitation or approval. It did not grant application-wide administrator privileges, and the vulnerability could not be used to obtain root access to the application or its underlying host.