CVE-2026-1237 — Vulnerable cross-model authorization in juju. If a charm's cross-model permissions are revoked or expire, a malicious user who is able to update database records can mint an invalid macaroon that — CVE Database · The Intelligence Room