Description
In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| JetBrains | Ktor | < 3.6.1 | 3.6.1 |
High · 8.1
CVE-2026-123317
EUVD-2026-118081GHSA-76h9-4mx5-8c9v
In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies
Published Nov 6, 2026 · Updated Nov 7, 2026 · Assigned by JetBrains