CVE-2026-123813

pyLoad is a free and open-source download manager written in Python.

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev102, pyLoad does not invalidate existing Flask sessions when an administrator changes a user's permissions or password through /api/set_user_permission or /api/change_password. Api.set_user_permission and Api.change_password update the database, but session authorization continues to use role and permission values copied at login by set_session in webui/app/helpers.py. A user can…

9. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-123813