Insufficient realm or gateway-descendant authorization on inbound edge gateway events allows an attacker controlling a registered gateway to break tenant isolation. The system maps event asset IDs using the reversible `GatewayConnector.mapAssetId` transform. By crafting pre-image IDs within `AttributeEvent` or `DELETE AssetEvent` messages, an attacker can overwrite attributes of or delete assets across any realm.