CVE-2026-32106

StudioCMS (versions before 0.4.3) has an inconsistent RBAC check: REST API createUser uses string-based checks that only block owner, while the Dashboard API uses rank-index comparison. This allows an admin to create peer-admin accounts via REST, enabling privilege proliferation. The issue is fix...