Authenticated privilege escalation via unrestricted profile attributes

Missing authorization in Mealie 2.2.0 allows remote authenticated users to grant themselves household privileges via profile updates. The PUT /api/users/{user-id} handler accepts user-controlled permission flags and householdId during a self-profile update without restricting administrator-managed fields. A standard account is required; exploitation enables household management and access to household data, but not administrator or cross-group privileges.