CVE-2026-107152

The smart_proxy_dynflow package contains an improper authentication vulnerability in its task console. The console incorrectly accepts any client certificate signed by the capsule's certificate authority without verifying if the certificate belongs to a trusted server. A low-privileged network at...