EUVD-2026-113936

AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level scopes by creating serviceaccount API keys with unvalidated scopes. Attackers holding writeapikeys can mint keys with readchannels and query /admin/graphql to read every...