Hulumi - Drift - CRITICAL - CVE-2026-82858. @hulumi/drift versions prior to 1.3.2 lack appropriate provenance validation for externally supplied execute plans. This flaw enables attackers to submit untrusted reconciliation inputs and bypass necessary security checks, potentially leading to unsafe reconciliation operations. Users should upgrade to the latest version to mitigate these security risks.