TI-2026-23483 CVE-2026-30269 · GHSA-4cgq-vq3r-c9r4Improper access control in Doorman v0.1.0 and v1.0.2 allows any authenticated user to…Priority HIGH 76Improper access control in Doorman v0.1.0 and v1.0.2 allows any authenticated user to update their own account role to a non-admin privileged role via /platform/user/{username}.CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00284 · Published 2026-04-20 · No fix listed CWE-269