PT-2026-69975

Name of the Vulnerable Software and Affected Versions ERPNext versions prior to 15.111.0 ERPNext versions prior to 16.22.0 Description The add ac function in erpnext/accounts/utils.py accepts the ignore permissions argument without enforcing the required Account create permission. This allows an...