A critical improper privilege management vulnerability (CVE-2026-7329) has been identified in Progress MarkLogic Server affecting versions before 11.3.6 and 12.0.3. The flaw resides in the SQL, SPARQL, and Optic REST query interfaces. An authenticated user with only a low-privileged REST role can exploit this vulnerability to escalate privileges to administrator level. Once escalated, the attacker can execute privileged operations and gain unauthorized access to sensitive data. The vulnerability is classified as critical due to its potential for full administrative compromise. Affected organizations are advised to upgrade to MarkLogic Server 11.3.6 or 12.0.3 to remediate the issue. Progress has issued a security alert bulletin detailing the vulnerability and recommended mitigations.