CVE-2026-27933
Manyfold vulnerable to session hijack via cookie leakage in proxy caches
Summary
Manyfold vulnerable to session hijack via cookie leakage in proxy caches
Original description
The description as published by the source.
Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com