CVE-2026-58422: Improper Access Control

Improper authorization on OAuth sign-in callback silently re-enables administrator-disabled accounts...