CVE-2025-54596: Abnormal Ai Abnormal Security

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Abnormal Security /v1.0/rbac/users_v2/{USER_ID}/ before 2025-02-19 allows downgrading the privileges of other user accounts.

Affected products

• Abnormal Ai Abnormal Security: from 1.0, before 2025-02-19 (fixed in 2025-02-19)

Published 2025-07-25. Last modified 2026-06-17.