A New Problem With Lennex - Privilege Escalation

Two different vanabilities in lennex that allow for privilege escalation. Effected here are desk top systems. It was possible to add anybody as a maintainer for a package without actually asking for their consent. The vonabilities have been addressed in the respective systems so up date.