Auth Bypass: Multiple endpoints were missing permission checks, allowing unauthorized operations like domain patching, custom node kind management, and analysis task control.

Denial of Service: Request signature validation buffered large payloads in memory, risking OOM; also lacked context deadlines and nil checks.

Denial of Service: Graph analysis traversals lacked depth/memory limits, leading to stack exhaustion or OOM on cyclic/expansive AD relationships.