A now-patched flaw in an enterprise AI workspace shows how a seemingly harmless preview layer can turn into a tenant-boundary problem if session handling slips.