CVE-2025-68926: Rust Tonic Grpc Hardcoded Authorization Tokencve-2025-68926-rust-tonic-grpc-hardcoded-authorization-token
Hardcoded string literal used as a tonic gRPC `authorization` metadata value. This places a static, non-rotatable shared secret in the source tree, which is equivalent to no authentication at all once the code is published or leaked (CWE-798, CWE-287). Any peer that knows the literal can authenticate to the gRPC service. Replace the static token with a per-r