Augmentt: Privilege Escalation via Parameter Tampering

Credits

This CVE was a collaborative effort between:
HelloWorld (Author) – GitHub: https://github.com/Penquinsecq
Raznov – GitHub: https://github.com/basraznov

Description

A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameter manipulation, enabling them to access and modify sensitive information.

[!CAUTION]This research is published for educational and defensive purposes. The vulnerabilities were disclosed responsibly and coordinated prior to publication.

Product: Augmentt Web Application
Version: Unknown version but release before October 2025
Date: 02-October-2025
Software Link: https://app.augmentt.com/
CVE ID: CVE-2026-6356
Category: Web Application\

Steps to Reproduce

1. Log in as a standard user
2. Navigate to the "Support" menu under "Management"
3. Intercept the HTTP response using a proxy tool
4. Modify the permission parameter
5. Forward the response

Proof of Concept

Please find in PDF file.

Impact

• Unauthorized access to admin functions
• Exposure of admin information and
• Modification of data

Timeline

Vendor Response

At the time of writing, the vendor has not responded to multiple disclosure attempts.

Mitigation

Recommended fixes: The server must look up the authenticated user's role/permissions from a secure backend database and enforce access rules based only on that verified server-side data. Even if the attacker manages to make the unauthorized menu item visible, the API endpoint that the menu item links to must perform its own, mandatory access check before processing any data.

References

• KB CERT: [If published]

Maintainers:

• HelloWorld (https://github.com/Penguinsecq)
• Raznov (https://github.com/basraznov)