CVE-2026-119446 | nerves-hub nerves_hub_web up to 2.5.2 CLI Login Flow /api/auth/cli_session NervesHub.Accounts.verify_cli_session_token session fixiation

SecurityVulns
Yanac

A vulnerability, which was classified as critical, has been found in nerves-hub nerves_hub_web up to 2.5.2. This vulnerability affects the function NervesHub.Accounts.verify_cli_session_token of the file /api/auth/cli_session of the component CLI Login Flow. Performing a manipulation results in session fixiation.

This vulnerability was named CVE-2026-119446. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More