CVE-2026-55147

The LORIS (Longitudinal Online Research and Imaging System) web application contains a security flaw where the API for the imaging_browser module fails to verify frontend permissions. This missing authorization allows an authenticated API caller to modify imaging data without the necessary privil...