CVE-2026-103470

In Internet2 Grouper versions prior to 7.5.1, certain configurations allow users with permission to create or edit rules in the User Interface to escalate their privileges, potentially leading to unauthorized access and control over the system. Organizations utilizing this software, particularly those managing sensitive data or user permissions, should prioritize patching to mitigate the risk of exploitation. Immediate action is recommended for all users of affected versions to safeguard against potential breaches.