CVE-2026-18972

An authenticated attacker can exploit a vulnerability in the system by manipulating the "Grpc-Metadata-USER" header to impersonate another GUI user, potentially escalating their privileges from a low-level account to that of an administrator. This critical vulnerability poses a significant risk of account takeover, making it essential for organizations using affected products to prioritize immediate remediation efforts to protect against unauthorized access. Security teams should focus on implementing proper input validation and access controls to mitigate this threat.