Federation traffic compromise via unapproved peer registration

Authentication bypass in Eidetic Labs Stigmem before 0.9.0a2 allows attackers to read or modify federation traffic via peer registration. The federation peer-registration flow accepts peer key material and activates peer tokens without a separate administrator out-of-band fingerprint check, so an intercepted or misdirected first registration can bind a malicious peer as trusted. Exploitation requires a node to expose federation peer registration on a network where the initial exchange can be intercepted or misdirected; the consequence is limited to traffic that traverses the rogue federation relationship.