CVE-2026-55494: Python Fail Open Auth Missing Secretcve-2026-55494-python-fail-open-auth-missing-secret
$FUNC silently reports success (bare `return` / `return True`) when $SECRET is unset or empty. The missing secret disables the only authentication control, so every endpoint guarded by $FUNC is reachable unauthenticated whenever the secret is not configured (fail-open authentication). Fail closed instead: raise an error (e.g. HTTP 401 Unauthorized) when $SEC
