CVE-2026-70547 is a vulnerability where an authenticated user without repository read permission may access package metadata under specific conditions. This issue allows limited unauthorized information disclosure but does not impact integrity or availability.