AIKIDO-2026-983507

TL;DR

The token auto-renewal path in lightrag/api/utils_api.py writes to a process-wide _token_renewal_cache dictionary keyed on the JWT sub claim before any authorization decision, with no size cap or eviction. In the API-key-only profile the JWT secret falls back to a public constant, so a client can mint signature-valid tokens with an arbitrary large sub, and every request that is ultimately rejected still permanently grows the dictionary. The same unsanitized sub is written into an INFO log line, allowing CR/LF log record forgery. The fix bounds the cache with an eviction ceiling, moves the write after the authorization decision, and sanitizes the logged value.