An authorization flaw exists in the '/api/ai/approvals' endpoint. This issue allows authenticated users with viewer-level permissions to manage approval requests. An attacker can list pending requests to expose proposed commands and targets, as well as approve or deny requests made by other users, which alters the decision and audit state.