What is CVE-2026-4548?

CVE-2026-4548 is a medium-severity vulnerability in Mickasmt Next-saas-stripe-starter, classified under Improper Authorization. CVSS score: 6.3/10. Published 2026-03-22.

How severe is CVE-2026-4548?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Auth bypass in Mickasmt Next-saas-stripe-starter

CVE-2026-4548

A vulnerability was detected in mickasmt next-saas-stripe-starter 1.0.0. Affected by this vulnerability is the function updateUserrole of the file actions/update-user-role.ts. The manipulation of the argument userId/role results in imprope…

EPSS: 0.000 (15.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R.

Affected products

Mickasmt Next-saas-stripe-starter — versions 1.0.0

Weakness classification (CWE)

References

VDB-352375 | mickasmt next-saas-stripe-starter update-user-role.ts updateUserrole improper authorization (vdb-entry, technical-description)
VDB-352375 | CTI Indicators (IOB, IOC, TTP, IOA) (signature, permissions-required)
Submit #774805 | mickasmt next-saas-stripe-starter 1.0.0 Improper Access Controls (third-party-advisory)

Frequently asked questions

What is CVE-2026-4548?: CVE-2026-4548 is a medium-severity vulnerability in Mickasmt Next-saas-stripe-starter, classified under Improper Authorization. CVSS score: 6.3/10. Published 2026-03-22.
How severe is CVE-2026-4548?: Medium severity. CVSS v3 base score is 6.3 out of 10.