A critical authorization vulnerability in BraveCMS allows any authenticated user to escalate their account privileges to Super Admin, resulting in full system compromise.

This vulnerability is a missing authorization check (CWE-862) located in the POST route at /rights/update-role/{id}. The application fails to apply the checkUserPermissions:assign-user-roles middleware, which enables any authenticated user to modify account roles and assign themselves administrative rights.

Successful exploitation allows a standard authenticated user to gain full administrative control over the content management system. This level of access leads to complete compromise of site integrity, potential theft of sensitive user data, and total loss of system availability. Given the CVSS score of 8.8, this flaw represents a significant risk to organizational security and operational continuity.

Immediate Action: Update BraveCMS to version 2.0.6 or later immediately to apply the required authorization middleware.

Proactive Monitoring: Audit user account management logs for suspicious role changes or unauthorized elevations occurring via the /rights/update-role/ endpoint.

Compensating Controls: Deploy a Web Application Firewall (WAF) to restrict access to the /rights/update-role/ route, limiting its availability to known administrative IP addresses or authenticated sessions with verified management permissions.

Public Exploit Available: Unknown.

The ability for any standard user to promote themselves to Super Admin constitutes a critical security failure. Administrators must prioritize the upgrade to version 2.0.6 to close the authorization gap. Failure to remediate this vulnerability leaves the environment exposed to full administrative takeovers by malicious or compromised internal accounts.