Vulnerability · Published Sep 1, 2026 · Assigned by VulnCheck
CVE-2026-45221Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path
High 7.8
In plain English
A high-severity uncontrolled search path in Konga from EASYBYTE Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Official description
Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-controlled OpenSSL configuration or library files in a hardcoded filesystem path absent from default installations. On Windows, the missing directory resides in a location writable by any authenticated local user, enabling attackers to create the directory and place malicious files that execute at the privilege level of the user or service account that launches Konga, facilitating privilege escalation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| EASYBYTE Software | Konga | 0 – before 2.1.0 |
Weakness: CWE-427 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- Downloads Archive patch
- Vendor Homepage product
- https://www.vulncheck.com/advisories/konga-privilege-escalation-via-hardcoded-openssl-path third-party-advisory