{"id":"CVE-2026-106145","revision":"9c5090bb9e4d44a89ee1b82432d4ae46","records":[{"revision":"9c5090bb9e4d44a89ee1b82432d4ae46","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-106145","aliases":[],"title":"Privilege Escalation in Telerik Report Server Service-Agent Hub","description":"In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-privilege or guest account with a valid bearer token, to register as a trusted service agent. On the next server settings-synchronization event, the rogue agent receives storage settings and encryption private keys. This privilege escalation enables disclosure of protected secrets, including stored data-source credentials and connection strings, and allows agent impersonation and interference with task dispatch.","state":0,"publishedAt":"2026-10-09T07:03:34.351+00:00","modifiedAt":"2026-10-09T18:03:22.258+00:00","affected":[{"ecosystem":"Vendor product","name":"Telerik Report Server","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Progress Software\",\n                    \"product\": \"Telerik Report Server\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"12.2.26.1007\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","score":7.1,"severity":"HIGH"}],"references":["https://www.telerik.com/report-server/documentation/knowledge-base/kb-security-incorrect-privilege-assignment-cve-2026-106145"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-106145","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-106145","identifiers":["CVE-2026-106145"]},"retained":false,"historicalAffected":[]}],"coverage":[]}