Authenticated users can gain higher privileges by cloning another account. In this vulnerability, a user with only the Technician profile can clone a Super‑Admin account, creating a new account with Super‑Admin rights. This enables the attacker to bypass all access controls, read, modify, or delete any data, and gain administrative control of the GLPI instance.

glpi-project GLPI versions 10.0.0 through 10.0.27 and 11.0.0 through 11.0.9 are affected. The problem exists in both major branches until the releases 10.0.28 and 11.0.10, respectively.

The CVSS score of 8.6 indicates a high‑severity flaw, and the EPSS score is not available, suggesting the exploitation probability is not well established. However, the vulnerability can be exploited by any authenticated user, making it reachable in environments where users have at least technician‑level access. The flaw is not listed in CISA’s KEV catalog, and no public exploits are known at this time, but the impact is severe enough to warrant immediate attention.