AWS Private CA Connector for Kubernetes: Authorization Bypass in Issuer Resolution

AWS Private CA Connector for Kubernetes has a nasty authorization bug (CVE-2026-119115) that lets authenticated users grab certificates from cluster-scoped issuers they shouldn't access. If you're running aws-privateca-issuer before v1.10.1 or the EKS add-on before v1.10.1-eksbuild.1, you need to patch ASAP—this is a real privilege escalation risk in your cert management.