PT-2026-133551

AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level scopes by creating service account API keys with unvalidated scopes. Attackers holding write api keys can mint keys with read channels and query /admin/graphql to read every...