[GHSA] GHSA-3hgv-jr5j-cg9x (high) — Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

GHSA-3hgv-jr5j-cg9x Severity: high CVE: CVE-2026-55694

Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover

### Impact An attacker can completely bypass file-name randomization security and without authorization download confidential, signed EULA files belonging to any other user across the application.

### Steps to Reproduce: 1. Log in as a restricted user. 2. Sen