CVE-2026-33906: Ella Core has Privilege Escalation via Database Restore by NetworkManager role
(updated )
The NetworkManager role was granted backup and restore permission. The restore endpoint accepted any valid SQLite file without verifying its contents.
References
- github.com/advisories/GHSA-87j9-m7x6-hvw2
- github.com/ellanetworks/core
- github.com/ellanetworks/core/commit/1e4768288a6519fcb63ec83f851584ecebb8a972
- github.com/ellanetworks/core/releases/tag/v1.7.0
- github.com/ellanetworks/core/security/advisories/GHSA-87j9-m7x6-hvw2
- nvd.nist.gov/vuln/detail/CVE-2026-33906
Code Behaviors & Features
Detect and mitigate CVE-2026-33906 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →