AIKIDO-2026-434301

TL;DR

The dashboard Feed widget caches fetched feed content under a cache key derived only from the feed URL, so the entry is shared across all control panel users. The endpoint that stores feed data accepts a URL and arbitrary data from any authenticated user and writes it to that shared key. Because the key is not scoped to the requesting user, one user can store feed content that another user's Feed widget then reads and renders. The fix scopes the feed cache key to the current user's ID so cached feed data is isolated per user.