CVE-2026-81842

An authenticated user with edit permission on one folder can exploit an incorrect authorization flaw to move a library panel into another folder where they only possess view permission . This occurs because the update path fails to verify library panel create permissions on the destination folder...

EUVD-2026-89460

An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination...

Library panel can be moved into a folder without library panel create permission

An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource. The update path did not check library panel create permission on the destination...