CVE-2026-82858: Untrusted Plan Actions Fallbackcve-2026-82858-untrusted-plan-actions-fallback
Falling back to plan.actions when token-based lookup from an internal store fails allows execution of unverified or forged actions. Ensure the token exists in the store and do not fall back to untrusted actions supplied in the plan object.