Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-27933 EUVD-2026-8776

Manyfold vulnerable to session hijack via cookie leakage in proxy caches

Published Feb 25, 2026 · Updated Feb 26, 2026 · Assigned by GitHub_M

Description

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue.

Affected products

VendorProductAffectedFixed
manyfold3d manyfold < 0.133.0 —

References