[P1 - CRITICAL] CMS Session Logout Unexpectedly Triggered During Folder Content Upload
Timeline · 2 updates
- investigating Mar 30, 2026, 11:27 AM UTC
Status: Investigating "Summary: A critical issue has been identified where users are being unexpectedly logged out of the CMS immediately upon uploading content to a folder. The session is being invalidated during the upload process, completely disrupting user operations. Current Status: The issue is currently under active investigation. The engineering team is analyzing the root cause, focusing on the relationship between the folder content upload mechanism and the CMS session management layer. Impact: All users attempting to upload content to folders via the CMS are experiencing forced session termination. This prevents any content upload operations from being completed and requires users to repeatedly re-authenticate, causing significant workflow disruption. Suspected Area: The session logout behavior appears to be triggered during or immediately after a folder content upload action. Root cause has not yet been confirmed. Next Steps: • Investigate session handling and token validation logic during file upload requests • Analyze server logs around the time of upload to identify session invalidation triggers • Check for potential CSRF token mismatches, auth middleware interference, or timeout misconfiguration • Reproduce the issue in a staging environment for controlled diagnosis ⚠️ This incident is actively being investigated. Further updates will follow as findings become available. " Affected components CMS (Degraded performance)
- resolved Apr 20, 2026, 04:38 AM UTC
Status: Resolved The issue causing users to be unexpectedly logged out of the CMS during folder content uploads has been resolved. Root Cause The session invalidation was triggered during the folder content upload process due to an interference in the auth middleware / CSRF token validation logic during file upload requests. Resolution The relevant session handling and token validation logic has been reviewed and corrected. The fix has been deployed and verified in the production environment. Verification Folder content uploads can now be completed successfully without session termination. Users no longer need to re-authenticate mid-operation. Impact Summary All users attempting to upload content to folders via the CMS were affected. Normal operations have been fully restored. Affected components CMS (Operational)