CVE-2026-73289: Rust Policy Outer Negation Quantifier

Applying outer logical XOR negation (`^ negate`) to the aggregated output of set policy condition evaluations (`eval`/`eval_like`) with `for_all` boolean flags causes logic inversion under `ForAllValues:` and `ForAnyValue:` qualifiers. Negation should be pushed down into per-element predicate evaluations or handled with quantifier context.

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Rust
greprules fetch cve-2026-73289-rust-policy-outer-negation-quantifier --engine opengrep

Description

Applying outer logical XOR negation (`^ negate`) to the aggregated output of set policy condition evaluations (`eval`/`eval_like`) with `for_all` boolean flags causes logic inversion under `ForAllValues:` and `ForAnyValue:` qualifiers. Negation should be pushed down into per-element predicate evaluations or handled with quantifier context.