CVE-2026-27933

6.8 mediumEPSS 0.3%

Medium (6.8) in manyfold manyfold. EPSS 0.3% chance of exploitation in the next 30 days.

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue.

Severity

CVSS 3.1

6.8 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-613
Published: 2026-02-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

manyfold:manyfold

References

https://github.com/manyfold3d/manyfold/releases/tag/v0.133.0
https://github.com/manyfold3d/manyfold/security/advisories/GHSA-g949-hmvj-2r76

Check your stack JSON