CVE-2026-103283: Js Session Auth Flag Carried Over Without Identity Bindingcve-2026-103283-js-session-auth-flag-carried-over-without-identity-binding
A session authentication/verification flag is conditionally inherited from a previous session, but the deny-guard short-circuits on the mere truthiness of the previous identity ($PREV_ID && ...). When the previous session has no bound identity (e.g. it was logged out and only the flag was left behind, or it predates identity binding), the guard evaluates fal
