[HIGH] Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation

PKSA-89fg-v2s3-x29j CVE-2026-55212 GHSA-f97c-ph8j-8vff

Affected package: pimcore/studio-backend-bundle

Affected version: >=2026.1.0,<2026.1.6|<2025.4.6

Reported by:
GitHub