CVE-2026-19863

The EthereumAuthenticator component is vulnerable to an authentication bypass because it uses an unanchored substring match to identify the login page. If a request path for a protected resource contains the configured login path as a subsequent segment, the system may incorrectly treat the reque...