Frappe ERPNext CVE-2026-109634

Exploitation requires an authenticated session with high privileges (PR:H) in Frappe ERPNext versions before 15.121.0 or 16.x before 16.34.0, plus the ability to reach the specific endpoints that lack input validation. The limiting factors are significant: the attacker must already possess an elevated/administrative account, no user interaction by a victim is needed (UI:N), and only confidentiality is affected (data can be read, not altered or destroyed). This is not remote-unauthenticated; the high-privilege prerequisite confines realistic risk to insiders or scenarios where a privileged account has already been compromised.

This is a genuine but moderate-priority issue rather than an emergency. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:H/UI:N, VC:H/VI:N/VA:N, score 6.9) describes a network-reachable, low-complexity SQL injection that nonetheless requires PR:H - high administrative privileges - which is the single largest mitigating factor: an attacker must already hold a trusted, elevated account before the flaw is reachable. The impact is confidentiality-only (VC:H, with VI:N/VA:N), consistent with the description's claim of data extraction rather than write/modification or denial of service. No CISA KEV listing and no public POC were provided, so exploitation status is 'no public exploit identified at time of analysis'; EPSS was not supplied. The signals are internally consistent - there is no conflict between the CVSS vector and the description (both agree on authenticated, high-privilege, network access). The main real-world risk is insider abuse or an attacker who has already compromised a privileged account pivoting to broader database exfiltration beyond what the application UI normally permits.

An attacker who already controls a high-privilege ERPNext account (e.g., a compromised System Manager or a malicious insider) sends specially crafted requests to the affected unvalidated endpoints, injecting SQL to read data the application would not otherwise expose. No public exploit code was identified, and exploitation is gated on the attacker first holding elevated privileges, so this is primarily a privilege-escalation-of-data-access and insider-threat scenario rather than mass remote exploitation.