{"id":"CVE-2026-4052","title":"Privilege Escalation via Token Endpoint in WSO2 API Manager (APIM 4.x/IS as Resident Key Manager)","summary":"This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obt…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-862"],"vendor":"WSO2","product":"WSO2 API Manager","affected":["api_manager 4.1.0","api_manager 4.2.0","api_manager 4.3.0","api_manager 4.4.0","api_manager 4.5.0","api_manager 4.6.0","api_control_plane 4.5.0","api_control_plane 4.6.0","org.wso2.km.ext.wso2is:wso2is.key.manager.core < 1.8.8"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-11-03T20:08:03.683649Z"},"published":"2026-11-03","updated":"2026-11-03","sourceUpdated":"2026-11-03T20:08:17.165Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-4052","references":[{"url":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5212/"}],"tags":["cve.org"],"epss":0.0036,"epssPercentile":0.29988,"ingestedAt":"2026-11-05T20:33:06.429Z","slug":"CVE-2026-4052","body":"## Overview\n\nThis issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database sharing. In such environments, a self-registered user may gain access to the System REST APIs of WSO2 API Manager by obtaining a token from the WSO2 Identity Server token endpoint.\n\n## Affected\n\n- `api_manager 4.1.0`\n- `api_manager 4.2.0`\n- `api_manager 4.3.0`\n- `api_manager 4.4.0`\n- `api_manager 4.5.0`\n- `api_manager 4.6.0`\n- `api_control_plane 4.5.0`\n- `api_control_plane 4.6.0`\n- `org.wso2.km.ext.wso2is:wso2is.key.manager.core < 1.8.8`\n\n## Remediation\n\nFollow the instructions given on https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5212/#solution","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}