CVE-2026-82271: Fastapi Unused Auth Dependency Missing Authorizationcve-2026-82271-fastapi-unused-auth-dependency-missing-authorization
Route handler parameter `$AUTH` is obtained via `Depends(...)` but is never referenced in the handler body when accessing conversation management services. This indicates a broken object-level authorization (BOLA/IDOR) vulnerability where conversation operations are performed without user ownership validation.
