CVE Intelligence

PelicanPlatform vulnerabilities

🔔 Create alert RSS

Published CVEs affecting PelicanPlatform products: 1 record(s), with severity, exploitation and fixes.

Pelican 1

Exploited only (KEV) →

CVE-2026-42571 Critical · 9.0 CWE-863 May 9, 2026
Pelican WebUI privilege escalation to admin via OAuth
Pelican is a platform for creating data federations. From versions 7.21.0 to before 7.21.5, 7.22.0 to before 7.22.3, 7.23.0 to before 7.23.3, and 7.24.0 to before 7.24.2, there is a a privilege escalation vulnerability affecting Pelican's Web User Interface (WebUI). This attack allows any user authenticated to the WebUI via OAuth to gain admin privileges under certain configurations. This issue has been patched in versions 7.21.5, 7.22.3, 7.23.3, and 7.24.2.