LinkedIn: Blocking a company page admin prevents him from delete paid media admin or edit his roles

A company page admin was prevented from managing deleting or editing roles of a paid media admin when the paid media admin blocked the company page admin. This created an access control vulnerability where administrative privileges were circumvented through the platform's social blocking feature...