CVE-2026-123317

Description

In JetBrains Ktor before 3.6.1 session forgery was possible via tampered encrypted session cookies

Affected Platforms

Weakness Type

CWE-354

References

• https://www.jetbrains.com/privacy-security/issues-fixed/