CVE-2026-80097: The Authenticator App Is a Credential Store, Not Just a Prompt

A local authentication flaw in an app that brokers sign-ins, and the device-level controls that limit what it can expose.