WS-2026-0071

ArangoDB privilege escalation via the isSystem task flag. RestTasksHandler read isSystem from the POST /api/tasks request body and passed it straight to Task::createTask with no privilege check, letting a database user with write permissions schedule a JavaScript task that runs in a privileged...