CVE-2026-28360: Generic Idor Presigned Urlcve-2026-28360-generic-idor-presigned-url
Generating a presigned URL directly from an unvalidated user input path can lead to an Insecure Direct Object Reference (IDOR). An attacker could exploit this by providing a path to another user's file or an internal system file, leading to arbitrary file disclosure. Validate the file path by mapping it to a database record owned by the authenticated user be