Quick answers
- Is CVE-2026-75796 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-75796 being exploited in the wild.
- How severe is CVE-2026-75796?
- High severity, with a CVSS score of 7.2, published 21 August 2026.
- Which products and versions are affected?
- Automatic AI Engine 2.8.0 to 3.6.0.
- Is there a fix for CVE-2026-75796?
- A patch was published on 2026-08-21: Fixed in version 3.6.1 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-75796 attacked?
- It is attacked over the network, in a software library.
- Am I affected by CVE-2026-75796?
- Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is a broken access control / privilege escalation (CWE-269) in the AI Engine plugin's MCP (Model Context Protocol) user management tools. The plugin fails to verify that a requesting user is authorized to act on targeted accounts before executing privileged user operations such as password resets, email changes, role promotion, and user creation via REST API endpoints. An attacker with Administrator role on a Multisite sub-site can extract a REST nonce from an admin page, enable MCP on their sub-site, and then call wp_update_user and other user management tools through the /wp-json/mcp/v1/http endpoint to modify or take over any user account on the network, including the Network Administrator. The fix in version 3.6.1 adds authorization checks that return "You are not allowed to edit this user" and similar messages, preventing cross-site account manipulation.
Affected products
- Automatic AI Engine 2.8.0 to 3.6.0
Timeline
- 2026-08-19: disclosed
- 2026-08-21: patched: Fixed in version 3.6.1