RockteMQ-AI commented on issue #11059: URL: https://github.com/apache/rocketmq/issues/11059#issuecomment-5655074366
**Issue Evaluation** Category: `type/bug` | Status: **Confirmed** The issue is valid. `GET_LITE_CLIENT_INFO` validates that the consumer group is bound to the parent topic, but then looks up the client's subscription by `clientId` alone without verifying that the returned subscription actually matches the requested consumer group. This means a client subscribed to a different group under the same parent topic could be returned, leaking subscription metadata across groups. The fix should compare the subscription's consumer group against the requested group before returning the client info. This is a straightforward validation gap. An automated fix proposal may be generated. Reply `/approve` to proceed with PR generation. --- *Automated evaluation by github-manager* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
