CVE-2025-54592 | FreshRSS up to 1.26.x Session Cookie session expiration (GHSA-42v4-65f8-5wgr)

September 30, 2025 Yanac

A vulnerability categorized as critical has been discovered in FreshRSS up to 1.26.x. Affected by this vulnerability is an unknown functionality of the component Session Cookie Handler. Such manipulation leads to session expiration.

This vulnerability is listed as CVE-2025-54592. The attack may be performed from remote. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More