CVE-2026-114075: Triggerdev Uat Minted Without Source Pat Bindingcve-2026-114075-triggerdev-uat-minted-without-source-pat-binding
A delegated user-actor token (`tr_uat_` JWT) is minted without binding the id of the personal access token it derives from into the signed claims (`pat` claim). The token is stateless: with no `pat` claim the host cannot re-check the source PAT's liveness, so the delegated token survives revocation of its source PAT until expiry, and its capability cap canno
