CVE-2026-47237 – Overly Permissive Istio Permissions Allow Kubeflow Authorization Token Stealing