CVE-2026-113595 [MEDIUM] – Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.change

Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows any authenticated member to modify the server logo without the MANAGE_SETTINGS permission. Attackers can remove the current logo and replace it with an uploaded image that is published to every connected client.