CVE-2026-27933CWE-613

Manyfold vulnerable to session hijack via cookie leakage in proxy caches

Medium · published February 25, 2026

CVSS v3.1
6.8
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00383 · 31.1th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2026-02-25T23:16Z
EPSS history
Timeline
  • 25 FEB 23:16Z
    Manyfold vulnerable to session hijack via cookie leakage in proxy caches
    cvelistv5