diff --git a/CHANGELOG b/CHANGELOG
index fb8648f629222c80a7258ed2c3e828974df96ba2..63e72cb1b04b9b925852640f5f3c77ebed3fc69d 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -10,6 +10,8 @@ minerva (14.0.0~beta.0) unstable; urgency=low
     check logs (#894)
   * Bug fix: user without admin or curator privileges had issues with accesing
     and removing data overlays (#897, #898, #899, #903)
+  * Bug fix: privilege checking on updating privileges, data overlays were not 
+    sufficient and could lead to access escalation
   * Bug fix: user without privileges had edit map input options enabled
   * Bug fix: alignment of tabs fixed for dialogs: "Add Project", "Edit Genome", 
     "Edit Project", "Edit User" (#881)