Frappe Builder authorization issue vulnerability

Versions of Frappe Builder prior to 1.33.0 and 1.36.0 contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks on the improveprompt endpoint; any authenticated non-Guest session can trigger LLM completion. Attackers can exploit resolveapikey to...