[HIGH] CI4MS: Account Deletion Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)

PKSA-xc2p-nr46-tjxw CVE-2026-34570 GHSA-4vxv-4xq4-p84h

Affected package: ci4-cms-erp/ci4ms

Affected version: <=0.28.6.0

Reported by:
GitHub