SZB-5b109907e2
EUVD-2026-112999 reports subscriber privilege escalation in BuddyBoss Platform
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- BuddyBoss
- Product
- BuddyBoss Platform
- First seen
Summary
The EU Vulnerability Database (EUVD) lists a privilege escalation flaw, scored 8.8 (CVSS v3.1), in BuddyBoss Platform up to version 3.5.0. The listing was published 2026-10-29 and updated 2026-10-30.
If you use BuddyBoss
Update BuddyBoss Platform to the latest vendor release
Review user roles and remove unnecessary subscriber-level access
Check site logs for unexpected role or permission changes
What the sources say 1
· Mastodon: “Subscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions.” Source