CVE-2026-101272

The software exhibits an incorrect session validation flaw regarding API-created shredder exports . The mechanism intended to bind files generated during the shredding process to specific authentication methods fails, resulting in the same session token being used for all token-based API users. T...