CVE-2026-107152 Rubygem-smart_proxy_dynflow: dynflow console authorizes any client certificate the capsule ca signed

An improper authentication vulnerability has been found in the task console in the smartproxydynflow package. The console accepts any client certificate signed by the capsule's certificate authority. It does not check the list of servers the capsule trusts. A low-privileged network attacker or us...