CVE-2026-12878

Description

In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.

References

• https://advisories.codefresh.io/post/2026/sa2026-01/