Cross-origin request bypass via tainted preflight cache

Incorrect authorization in Google Chrome Network before 154.0.8037.57 allows remote attackers to bypass CORS preflight checks via crafted HTML. PreflightController caches a tainted redirect's Origin: null approval under the raw request initiator, allowing a later untainted request to skip its required preflight. Exploitation requires a visited attacker page and a target that accepts null-origin preflights; the bypass permits blind credentialed state changes, not response reads.