CVE-2022-26310

What it actually does

The flaw permits any authenticated user with access to the User Management module to create, modify, or delete users possessing full administrative privileges, resulting in vertical privilege escalation.

Why it matters to the business

Attackers who obtain low-privilege credentials can seize full administrative control, exposing sensitive data and disrupting operations across affected flatpressblog/flatpress deployments; the low EPSS score and lack of KEV listing indicate limited observed exploitation risk despite the 1539-day publication age.

How an attack unfolds

An attacker first authenticates with a standard user account that has access to the User Management module, then directly invokes the module's create/modify/delete functions to elevate any account to full admin rights, after which the attacker logs in with the newly created or modified admin credentials.

How to fix it

Upgrade flatpressblog/flatpress (GIT) to commit 5d5c7f6d8f072d14926fc2c3a97cdd763802f170 or commit 32771f9457f48d768747d41f7fffdcc66718465e; verify the deployed version contains one of these fixes before declaring remediation complete.

How to confirm the fix worked

Confirm the running codebase contains one of the listed fixed commits, then attempt to perform user-management actions with a non-admin account to verify that privilege-escalation attempts are now blocked.

Typical attack path

1. Obtain valid low-privilege credentials for an account that can reach the User Management module
2. Access the User Management interface and issue create, modify, or delete operations targeting higher-privilege accounts
3. Log in with the newly elevated admin account to perform further actions

How to detect it

Examine application logs and user-management audit trails for unexpected creation, modification, or deletion of high-privilege accounts by non-admin users; correlate with authentication events showing new admin logins shortly after such changes.

What your security team should do

• Immediately apply the referenced commits to all flatpressblog/flatpress instances
• Audit existing user accounts for unexpected admin privileges created since publication
• Review access controls around the User Management module to enforce least privilege
• Monitor for any post-fix attempts to access the module with non-admin credentials