CVE-2026-45165 An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform…

Description

An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access controls on the branch or cause a denial of service (DoS). Idira Security Bulletin CA26-38.

Affected products and versions