Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-27933

Manyfold vulnerable to session hijack via cookie leakage in proxy caches

Description

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

manyfold3d manyfold

  • < 0.133.0affected

References