CVE-2026-59597

A logic error in the bindDataService method of DataServiceManager.java allows an attacker to retain privileged tunnel management permissions during configuration updates. This vulnerability facilitates a local escalation of privilege without requiring additional execution privileges or user inter...