CVE-2026-32726

A flaw was found in SciTokens C++. The library's enforcer used a simple string-prefix comparison for path-based scope validation, which did not require a path-segment boundary. This allowed a token scoped to one path to incorrectly authorize access to sibling paths that shared the same prefix...