[P1 - CRITICAL] CMS Session Logout Unexpectedly Triggered During Folder Content Upload

Update timeline

1. investigating Mar 30, 2026, 11:27 AM UTC

   "Summary: A critical issue has been identified where users are being unexpectedly logged out of the CMS immediately upon uploading content to a folder. The session is being invalidated during the upload process, completely disrupting user operations. Current Status: The issue is currently under active investigation. The engineering team is analyzing the root cause, focusing on the relationship between the folder content upload mechanism and the CMS session management layer. Impact: All users attempting to upload content to folders via the CMS are experiencing forced session termination. This prevents any content upload operations from being completed and requires users to repeatedly re-authenticate, causing significant workflow disruption. Suspected Area: The session logout behavior appears to be triggered during or immediately after a folder content upload action. Root cause has not yet been confirmed. Next Steps: • Investigate session handling and token validation logic during file upload requests • Analyze server logs around the time of upload to identify session invalidation triggers • Check for potential CSRF token mismatches, auth middleware interference, or timeout misconfiguration • Reproduce the issue in a staging environment for controlled diagnosis ⚠️ This incident is actively being investigated. Further updates will follow as findings become available. "

2. resolved Apr 20, 2026, 04:38 AM UTC

   The issue causing users to be unexpectedly logged out of the CMS during folder content uploads has been resolved. Root Cause The session invalidation was triggered during the folder content upload process due to an interference in the auth middleware / CSRF token validation logic during file upload requests. Resolution The relevant session handling and token validation logic has been reviewed and corrected. The fix has been deployed and verified in the production environment. Verification Folder content uploads can now be completed successfully without session termination. Users no longer need to re-authenticate mid-operation. Impact Summary All users attempting to upload content to folders via the CMS were affected. Normal operations have been fully restored.