The vulnerability in x‑ui allows an authenticated user to alter inbound proxy configurations belonging to other users. The flaw lies in the update path that does not verify the ownership of the target configuration when a request references its identifier. As a result, a malicious actor can change remarks, ports, protocols, settings, enabled state, expiry time, and traffic quota for other accounts, giving them unauthorized control over those users’ network traffic.

x‑ui version 0.3.2 is affected. No other product or vendor versions are listed.

Because the exploit requires only authenticated access and the attacker can target any inbound proxy configuration by supplying the desired identifier, the risk is high for any environment where cross‑user modification is not otherwise constrained. The CVSS score of 8.8 reflects high severity, while the EPSS score of less than 1% indicates a low probability of exploitation. The vulnerability is not listed in CISA KEV, suggesting no known widespread exploitation. However, the straightforward nature of the request means that any compromised or poorly secured instance of x‑ui could be abused for horizontal privilege escalation.