mirror of
https://github.com/open62541/open62541.git
synced 2026-10-18 21:52:55 +08:00
be8239f10d
The SecurityGroup check returned "executable" whenever the session carried no context, which is the case for every session the example configures. Compare the session's ClientUserId instead and deny when there is none. Register the demo user so a client can activate a session under that name, and keep the node context out of a stack frame. Internal Vulnerability Advisory: open62541-SA-2026-0056 Co-Authored-By: Jason Huibin Wang <jasontimwong@users.noreply.github.com>