CVE-2026-96457

their owner from these claims and treated the attacker's token as the administrator's, giving them full control of the realm.

CVE-2026-96457 (High, no score yet): In realms using Fine-Grained Admin Permissions v2 and delegating group management to admins other than realm ⬇️