AIKIDO-2026-573956

TL;DR

The Sign engine processes incoming wc_sessionUpdate requests in onSessionUpdateRequest without verifying that the sending peer is the session controller. A non-controller peer in an established session, such as a dApp using a custom SDK, can send a session update and mutate the stored session namespaces it was never authorized to change. The public update() method likewise does not restrict callers to the controller. The fix rejects wc_sessionUpdate from non-controller peers with UNAUTHORIZED_UPDATE_REQUEST and makes update() throw when invoked by a non-controller.