CVE-2025-58386: Improper Authorization

In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function is not subject to proper server-side authorization checks. A Power User can intercept and modify this parameter to assign the Administrator role to other existing lower-privileged accounts, or invite a new...

CVE-2025-58386

Terminalfour versions 8 through 8.4.1.1 are vulnerable to a privilege escalation flaw due to insufficient server-side authorization checks on the userLevel parameter in the user management function. A Power User can intercept and modify this parameter to assign the Administrator role to existing ...