CVE-2026-79745: Missing Admin Auth Builtin Mutation

Built-in resource or prompt mutation handler performs modifications without verifying administrator privileges, which may allow unauthorized non-admin users to alter global configuration.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0TS
greprules fetch cve-2026-79745-missing-admin-auth-builtin-mutation --engine opengrep

Description

Built-in resource or prompt mutation handler performs modifications without verifying administrator privileges, which may allow unauthorized non-admin users to alter global configuration.