CVE-2026-117681 — Konflux-ci: UI proxy skips backend TLS verification on non-OpenShift clusters, leaking a cluster authentication token

A vulnerability in Konflux-ci may allow privilege escalation when the UI proxy disables TLS certificate verification for connections to internal backend services because a default service certificate authority is unavailable.