CVE-2026-92780 [HIGH] – KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoin

KnowStreaming through 3.4.1 fails to enforce role-based access control on REST API endpoints, allowing any authenticated user to access protected functionality. Attackers can call identity-management endpoints to create administrator accounts or grant themselves administrative privileges without proper authorization.