CVE-2026-27933

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-27933", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-02-25T03:11:36.688Z", "datePublished": "2026-02-25T23:16:01.572Z", "dateUpdated": "2026-02-26T16:45:33.523Z"}, "containers": {"cna": {"title": "Manyfold vulnerable to session hijack via cookie leakage in proxy caches", "problemTypes": [{"descriptions": [{"cweId": "CWE-613", "lang": "en", "description": "CWE-613: Insufficient Session Expiration", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/manyfold3d/manyfold/security/advisories/GHSA-g949-hmvj-2r76", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/manyfold3d/manyfold/security/advisories/GHSA-g949-hmvj-2r76"}, {"name": "https://github.com/manyfold3d/manyfold/releases/tag/v0.133.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/manyfold3d/manyfold/releases/tag/v0.133.0"}], "affected": [{"vendor": "manyfold3d", "product": "manyfold", "versions": [{"version": "< 0.133.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-25T23:16:01.572Z"}, "descriptions": [{"lang": "en", "value": "Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue."}], "source": {"advisory": "GHSA-g949-hmvj-2r76", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-26T16:45:19.118722Z", "id": "CVE-2026-27933", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T16:45:33.523Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-27933", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-02-25T03:11:36.688Z", "datePublished": "2026-02-25T23:16:01.572Z", "dateUpdated": "2026-02-26T16:45:33.523Z"}, "containers": {"cna": {"title": "Manyfold vulnerable to session hijack via cookie leakage in proxy caches", "problemTypes": [{"descriptions": [{"cweId": "CWE-613", "lang": "en", "description": "CWE-613: Insufficient Session Expiration", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/manyfold3d/manyfold/security/advisories/GHSA-g949-hmvj-2r76", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/manyfold3d/manyfold/security/advisories/GHSA-g949-hmvj-2r76"}, {"name": "https://github.com/manyfold3d/manyfold/releases/tag/v0.133.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/manyfold3d/manyfold/releases/tag/v0.133.0"}], "affected": [{"vendor": "manyfold3d", "product": "manyfold", "versions": [{"version": "< 0.133.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-25T23:16:01.572Z"}, "descriptions": [{"lang": "en", "value": "Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue."}], "source": {"advisory": "GHSA-g949-hmvj-2r76", "discovery": "UNKNOWN"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-27933", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-26T16:45:19.118722Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-26T16:45:27.724Z"}}]}}

{"affected": [{"affectedData": [{"product": "manyfold", "vendor": "manyfold3d", "versions": [{"status": "affected", "version": "< 0.133.0"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:manyfold:manyfold:*:*:*:*:*:*:*:*", "matchCriteriaId": "6F54584E-5C84-449F-848F-730DC1BECAC2", "versionEndExcluding": "0.133.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue."}, {"lang": "es", "value": "Manyfold es una aplicaci\u00f3n web de c\u00f3digo abierto y autoalojada para gestionar una colecci\u00f3n de modelos 3D, particularmente enfocada en la impresi\u00f3n 3D. Las versiones anteriores a la 0.133.0 son vulnerables al secuestro de sesi\u00f3n a trav\u00e9s de la fuga de cookies en cach\u00e9s de proxy. La versi\u00f3n 0.133.0 corrige el problema."}], "id": "CVE-2026-27933", "lastModified": "2026-06-17T10:27:55.877", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 5.2, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-27933", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-02-26T16:45:19.118722Z", "version": "2.0.3"}}]}, "published": "2026-02-26T00:16:26.973", "references": [{"source": "security-advisories@github.com", "tags": ["Product", "Release Notes"], "url": "https://github.com/manyfold3d/manyfold/releases/tag/v0.133.0"}, {"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/manyfold3d/manyfold/security/advisories/GHSA-g949-hmvj-2r76"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-613"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.133.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "manyfold", "source": "cna", "vendor": "manyfold3d"}, "product": "manyfold", "vendor": "manyfold3d"}], "analysis": {"en": {"generated_at": "2026-04-17T14:43:40.579875+00:00", "value": {"mitigation_remediation": ["Upgrade Manyfold to version 0.133.0 or later. This release includes the fix for session cookie leakage. ", "Configure any reverse proxies, CDN, or caching layers to prevent the storage of session cookies. This can be done by setting appropriate Cache\u2011Control headers, disabling caching for authenticated traffic, or marking the session cookie with the Secure and SameSite attributes so it is not cached. ", "Enable the Secure, HttpOnly, and SameSite cookie flags in Manyfold\u2019s configuration. Additionally, monitor log files for unusual or unauthorized session activity and consider implementing IP whitelisting or two\u2011factor authentication for highly privileged accounts."], "summary": {"action": "Immediate Patch", "impact": "Unauthorized session hijack due to cookie leakage"}, "threat_synthesis": {"affected_systems": "The affected product is Manyfold 3D, the self\u2011hosted web application from manyfold3d. All releases earlier than 0.133.0 are vulnerable; the fix was released in version 0.133.0. Users running any of these prior versions are susceptible. No other vendor or product is listed.", "description_and_impact": "Manyfold is an open\u2011source web application for managing 3D models. Versions prior to 0.133.0 allow an attacker to hijack a user session because authentication cookies are written to proxy cache entries that are shared among clients. The vulnerability is a session cookie leakage problem, classified as CWE\u2011613, enabling an attacker to impersonate an authenticated user and gain unauthorized access to the application and potentially its underlying data.", "risk_and_exploitability": "The CVSS score of 6.8 indicates moderate severity, but the EPSS score of less than 1% suggests that real\u2011world exploitation is unlikely at present. The vulnerability is not listed in the CISA KEV catalog, highlighting its low exploitation footprint. An attacker would need to send or intercept responses through a shared proxy cache that stores session cookies, or target a tenant in a multitenant environment exposed behind such a cache. If successful, the attacker could impersonate a legitimate user and access sensitive data or perform actions on behalf of that user."}}}}, "created": "2026-02-26T13:10:38.772368+00:00", "updated": "2026-04-17T14:45:21.041622+00:00", "vendors": ["manyfold3d", "manyfold3d$PRODUCT$manyfold"]}