GHSA-vrh8-c9cm-wh8v: ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange

### Summary A vulnerability in ZITADEL’s OAuth2 Token Exchange endpoint allows an authenticated user or client to exchange a low-privilege access token for a token with elevated permissions at a completely different application. This bypasses the intended authorization and separation policies configured within ZITADEL. ### Impact ZITADEL enables administrators to restrict token issuance based on client permissions, project roles, and specific scopes. …