autoreview, torunblocked are two rights that are not in MediaWiki core. These two rights should be removed from the default settings.
Hi @Nbdd0121, thanks for taking the time to report this!
Unfortunately this report lacks some information. If you have time and can still reproduce the problem, please add a more complete description to this report and also explains where "grants" come into play.
Ideally, exact and clear steps to reproduce should allow any other person to follow these steps (without having to interpret those steps) and see the same results. Problems that others can reliably reproduce can get fixed faster. Thanks!
@Aklapper "Grants" is the new feature introduced in MediaWiki 1.27 (which is migrated from OAuth plugin), and in DefaultSettings.php, two rights, torunblock and autoreview are listed. I am saying that these two rights are not expected to be there. This is an improper implementation, so reproducing is easy: do a fresh installation and navigate to Special:ListGrants, and you will see these two rights are there.