Medium severity6.8NVD Advisory· Published Feb 26, 2026· Updated Jun 17, 2026

CVE-2026-27933

Description

Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing. Versions prior to 0.133.0 are vulnerable to session hijack via cookie leakage in proxy caches. Version 0.133.0 fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Manyfold3d/Manyfoldllm-fuzzy2 versions
<0.133.0+ 1 more
- (no CPE)range: <0.133.0
- (no CPE)range: < 0.133.0
Manyfold/Manyfold
cpe:2.3:a:manyfold:manyfold:*:*:*:*:*:*:*:*
Range: <0.133.0

Patches

Vulnerability mechanics

References

github.com/manyfold3d/manyfold/security/advisories/GHSA-g949-hmvj-2r76nvdExploitVendor Advisory
github.com/manyfold3d/manyfold/releases/tag/v0.133.0nvdProductRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000