TI-2026-40497 CVE-2026-56115 · GHSA-vhmp-9f3g-3f36Bootimus 0.1.70 Broken Access Control via JWTMiddleware Authorization BypassPriority LOW 38Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function…CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00452 · Published 2026-06-23 · Fix deferred CWE-862