PT-2026-41481

Summary The POST /v1/domain/ image and POST /v1/oauth2/rs name/ image handlers call validate image on the uploaded body before the ACL check that restricts image upload to admins. Any bug in an image validator is therefore reachable by an unauthenticated remote client rather than being admin-gate...