EUVD-2026-120523

Storyden through 1.26.16 contains a privilege escalation vulnerability that allows users holding MANAGEROLES to grant the ADMINISTRATOR permission without being administrators. Attackers can call AccountAddRole on another controlled account or use RoleCreate and RoleUpdate to create administrator...