CVE-2026-92761

WebVirtCloud fails to properly validate permission flags in UserInstance grants. The vulnerable component is the get_instance gate in instances/views.py, which only checks for the existence of a grant rather than verifying its permission level. As a result, users holding view-only (read-only) gra...