Resolved: Brief Data Exposure via Railway CDN Misconfiguration
Timeline:
• Investigating: We received reports of unexpected data exposure where users were occasionally served pages or dashboard views belonging to other active sessions.
• Identified: The root cause was an upstream incident at our hosting provider, Railway. A configuration change on their platform accidentally enabled CDN caching on domains where it was explicitly disabled. As a result, the edge network cached HTTP GET response...