CVE-2026-23488: Idor Target Role Auth Bypasscve-2026-23488-idor-target-role-auth-bypass
Authorization bypass (IDOR) detected. The code fetches a target object and uses the target object's properties (e.g., role or privileges) for authorization, instead of the requester's context. An attacker can bypass access controls by explicitly calling the endpoint against an object that holds the privileged role. Verify that authorization checks evaluate t
