CVE-2026-5712

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing.

Score

CVSS 3.1 8.8 High

Status

Analyzed - psirt@sailpoint.com

Published

2026-04-29

Last modified

2026-10-26

Weaknesses

CWE-863

Affected products

• Identityiq (Sailpoint)
• Identityiq (Sailpoint Technologies)

References

• https://www.sailpoint.com/security-advisories/sailpoint-identityiq-role-editor-incorrect-authorization-vulnerability-cv…