CVE-2026-117549 | fastify fastify-secure-session up to 8.4.1 Cookie Unsign Routine improper authentication

November 2, 2026 Yanac

A vulnerability was found in fastify fastify-secure-session up to 8.4.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component Cookie Unsign Routine. This manipulation causes improper authentication.

This vulnerability appears as CVE-2026-117549. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More