PT-2026-53556

Summary Type: Privilege escalation / cross-tenant member injection. The POST /workspaces/workspace id/members endpoint is gated only by require workspace memberworkspace id default min role="member" and forwards the request body's user id and role straight into MemberService.addworkspace id, user...