TL;DR



AI editors keep generating CORS middleware that reflects the request's Origin header back verbatim while also allowing credentials, so any site on the internet can make authenticated calls to your API and read the response
It passes local testing because reflecting the origin "just works" for every dev port and tool, so nobody notices...