CVE-2026-126803

The software Rote through 2.6.0 is vulnerable to a privilege escalation vulnerability. Authenticated admins can obtain super_admin rights by accessing the /v2/api/admin/settings endpoint, which allows for the reading or overwriting of JWT signing secrets . Specifically, attackers can retrieve the...