---
id: CVE-2026-3322
title: Privilege escalation via request replaying in Lobster_pro
summary: "Due to improper permission checks in\_Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects\_Lobster_pro\_version 4.12.12-LTS and potentially other versions prior to\_25.…"
severity: medium
cvss: 5.6
cvssVector: 'CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:A'
cvssSource: cna
cwe:
  - CWE-280
vendor: Lobster DATA GmbH
product: Lobster_pro
affected:
  - Lobster_pro 4.12.12-LTS
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-26T16:26:47.958583Z'
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T16:46:45.264Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-3322'
references:
  - url: 'https://www.schutzwerk.com/en/blog/schutzwerk-sa-2025-002/'
tags:
  - cve.org
ingestedAt: '2026-10-26T15:29:30.515Z'
---

## Overview

Due to improper permission checks in Lobster_pro, attackers are able to interact with endpoints that should require administrative privileges. This issue affects Lobster_pro version 4.12.12-LTS and potentially other versions prior to 25.1.3.

## Affected

- `Lobster_pro 4.12.12-LTS`

## Remediation

Update Lobster_pro to version 25.1.3 or later.