Privilege escalation is a security flaw that lets an attacker move from limited access to higher permissions than they should have. In practice, that might mean a normal account gaining access to administrative functions, protected data, or system-level commands. The bug may come from weak input validation, broken authorization checks, unsafe privilege boundaries, or logic errors in privileged helper code.
It matters because higher privileges often unlock the most sensitive parts of a system. In hosting platforms and other control-plane environments, even a small validation mistake can be serious if it sits inside an admin workflow. Attackers look for these flaws to turn a low-trust foothold into broader control, while defenders treat them as high-priority patch issues and monitor privileged paths for unusual errors, access patterns, or failed administrative actions.