CWE-268 (特权链锁) — Vulnerability Class 20

CWE-268, Privilege Chaining, is a design weakness where combining two distinct privileges, roles, or capabilities enables an entity to perform unsafe actions that would remain prohibited if either privilege existed in isolation. Attackers typically exploit this by leveraging a low-privilege account to access a secondary, restricted resource, effectively chaining the limited rights to achieve unauthorized outcomes such as data exfiltration or system compromise. Developers can mitigate this risk by implementing strict least-privilege principles, ensuring that no single user or process accumulates excessive permissions. Additionally, employing role-based access control with clear separation of duties and conducting thorough threat modeling during the design phase helps identify potential privilege combinations. Regular security audits and dynamic analysis tools further assist in detecting unintended privilege escalations, ensuring that combined rights do not inadvertently create dangerous attack vectors.