CVE-2026-13575 | HTTP::Session up to 0.53 CHI Store CHI.pm session id command injection

November 1, 2026 Yanac

A vulnerability, which was classified as critical, has been found in HTTP::Session up to 0.53. This impacts an unknown function of the file lib/HTTP/Session/Store/CHI.pm of the component CHI Store. The manipulation of the argument session id leads to command injection.

This vulnerability is uniquely identified as CVE-2026-13575. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More