Sebastion
←All topics

architecture

4 pieces of writing

security12 min read

Pre-operation access checks failed across 75 trust-boundary incidents analysed in arXiv:2607.01711

Authentication validation keeps failing because many API handlers prove access before the security-sensitive operation, then let state, identity or interpretation change underneath that decision.

security13 min read

OpenClaw's 470 advisories show unauthenticated RCE became a cloud AI platform pattern

security13 min read

Authentication bypass in 2026: access validation keeps failing before critical operations

security13 min read

CIFSwitch CVE-2026-46243 and PraisonAI show privilege escalation is an architectural antipattern

CIFSwitch CVE-2026-46243 and PraisonAI show why vertical movement often follows from designs that let low-trust identities shape high-trust operations.