CVE-2026-85491 affects Catalyst::Seal versions before 0.03 for Perl and involves an incomplete comparison vulnerability in the dispatch memoization mechanism. The memoization key uses only the request path, ignoring other factors like HTTP method, content type, scheme, or query parameters. This can cause authorization checks to be bypassed by replaying memoized dispatch results from different request contexts. The memo entries persist for the life of the process, allowing one request to disable or misroute subsequent requests, potentially skipping authorization checks. The vulnerability has a high severity with a CVSS score of 8.8.