EEF-CVE-2026-124278 Path bindings ignored for gRPC Content-Types on transcoded routes in elixir-grpc grpc_server

Summary Authorization Bypass Through User-Controlled Key vulnerability in elixir-grpc grpcserver and grpc allows an attacker to make a handler act on a resource other than the one named in the URL of an HTTP-transcoded route, via a request with a gRPC Content-Type. Only the transcoding clause of...