CLEANSTART-2026-BJ55252 frontend gRPC server's streaming interceptor chain did not include the authorization interceptor

CVE-2026-5724 affects multiple packages. The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. See references for individual vulnerability details...

CVE-2026-5724

The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor. When a ClaimMapper and Authorizer are configured, unary RPCs enforce authentication and authorization, but the streaming AdminService/StreamWorkflowReplicationMessages endpoint accepted requests...