---
id: CVE-2026-45221
title: >-
  Konga before 2.1.0 contains a privilege escalation vulnerability that allows
  low-privileged local attackers to execute arbitrary code by planting
  attacker-controlled OpenSSL configuration or library files in a hardcoded
  filesystem path a…
summary: >-
  Konga before 2.1.0 contains a privilege escalation vulnerability that allows
  low-privileged local attackers to execute arbitrary code by planting
  attacker-controlled OpenSSL configuration or library files in a hardcoded
  filesystem path a…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-427
published: '2026-09-01'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T20:18:59.270'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-45221'
references:
  - url: 'https://public.easybyte.it/downloads/archive/2.1.0'
    label: disclosure@vulncheck.com
  - url: 'https://www.easybyte.it/'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/konga-privilege-escalation-via-hardcoded-openssl-path
    label: disclosure@vulncheck.com
tags:
  - nvd
epss: 0.00173
epssPercentile: 0.0595
ingestedAt: '2026-09-08T21:11:12.289Z'
---

## Overview

Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path absent from default installations. On Windows, the missing directory resides in a location writable by any authenticated local user, enabling attackers to create the directory and place malicious files that execute at the privilege level of the user or service account that launches Konga, facilitating privilege escalation.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.