Cross-user data disclosure via thread-context privilege confusion

Information disclosure in affected Siren Federate releases allows remote authenticated users to access data with another user's privileges. A query can inherit a different thread's security context when low- and high-privilege queries execute concurrently, causing the lower-privilege query to run with the higher-privilege user's authorization. Exploitation requires low-privilege authentication and opportunistic concurrency with a higher-privilege query; the documented consequence is cross-user information exposure, not data modification or service interruption.