TI-2026-83084 CVE-2026-119599 · GHSA-cvgf-hhh8-56v5
Privilege escalation in AxonHub via service account API key scopes
Priority MEDIUM 57
AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level scopes by creating service_account API keys with unvalidated scopes.