High severity · published Oct 3, 2026
CVE-2026-105126
LaraDashboard before 1.4.8 Privilege Escalation via Superadmin Role Tampering
7.2
CVSS
0.5%
EPSS
No
On KEV
Description
LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing or renaming roles. Attackers with role.edit can rename their role to Superadmin or grant user.login_as permissions to take over accounts and reach core upgrade and module installation functions for code execution.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LA
laradashboard · laradashboard
before 1.4.8 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-105126
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-105126
vendor-advisory
https://github.com/laradashboard/laradashboard/security/advisories/GHSA-555v-6rfr-r969
technical-description
https://github.com/laradashboard/laradashboard/blob/v1.4.2/app/Http/Controllers/Backend/RoleController.php#L144
technical-description
https://github.com/laradashboard/laradashboard/blob/v1.4.2/app/Http/Controllers/Backend/RoleController.php#L180
technical-description
https://github.com/laradashboard/laradashboard/blob/v1.4.2/app/Policies/RolePolicy.php#L39-L50
technical-description
https://github.com/laradashboard/laradashboard/blob/v1.4.2/app/Http/Requests/CoreUpgrade/UploadRequest.php#L23
patch
https://github.com/laradashboard/laradashboard/pull/344
More from laradashboard
9.8
CVE-2026-86184
Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route
9.8
CVE-2025-66509
LaraDashboard: 1-Click Pre-Auth RCE via Host Header + Module Installation Chain
7.2
CVE-2026-90932
LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE
7.2
CVE-2026-86438
Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Action
7.2
CVE-2026-86437
Lara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive Upload