🚨 CVE-2026-68757
A user with access to a valid SAML response may impersonate another user under specific conditions.