A vulnerability was found in defenseunicorns pepr up to 1.0.4. It has been classified as critical. Affected by this issue is some unknown functionality of the component RBAC Configuration Handler. Performing a manipulation results in least privilege violation.
This vulnerability is identified as CVE-2026-23634. The attack can be initiated remotely. There is not any exploit available.
Upgrading the affected component is recommended.
