CVE-2026-27802
EUVD-2026-950204.03.2026, 22:16
Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Prior to version 1.35.4, there is a privilege escalation vulnerability via bulk permission update to unauthorized collections by Manager. This issue has been patched in version 1.35.4.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| dani-garcia | vaultwarden | 𝑥 < 1.35.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration