Multiple BinSoft products expose excessive database privileges through the user account used by the application. An attacker who can observe any running instance of the affected software connected to the backend can inspect the process memory and extract the database credentials stored there. Although retrieving credentials from memory may be expected in some scenarios, the disclosed credentials grant administrative access to the database, far beyond the privileges required for normal application functionality. This enables the attacker to perform administrative database actions that go beyond the application interface.

The vulnerability impacts all BinSoft products listed as vendor product: mpCRM, mpFaktura, mpFirma, mpFirma ERP, mpGabinet, mpPOS, mpSekretariat and mpWarsztat. All released versions of these products are affected; no specific version restrictions are mentioned.

The CVSS score of 6.9 indicates a moderate severity. The EPSS score of 0.0017 indicates a very low exploitation probability, while the issue is not listed in CISA’s KEV catalog. The most likely attack path involves an attacker gaining local or remote access to a running application instance and probing the process memory to retrieve database credentials, which is then leveraged to obtain administrative database actions. Adequate hardening of process visibility and privilege reductions can mitigate this risk.