AIKIDO-2025-10202

TL;DR

Affected versions of this package are vulnerable to a security misconfiguration due to insufficient validation of user permissions in company role configurations. This allows privilege escalation by manipulating the id-company-role or id-permission parameters. An attacker can exploit this by crafting malicious requests to gain elevated privileges, potentially resulting in unauthorized access to sensitive functions or data.