CVE-2026-97629: Resumed TLS sessions bypass the client-certificate boundary

A resumed TLS session reaches a certificate-protected route without a matching authenticated client identity. Contain the exposed path and restore the affected workflow without weakening its security boundary.

Jamie Engineering lead · 02:13 a.m.

Video streaming / ap-northeast. Investigate nginx-mtls, restore service, and verify the result.