PT-2025-20398 · Unknown+1 · Rack::Session+1

Stengineering0 · Published 2025-05-08 · Updated 2026-03-13 · CVE-2025-46336

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Rack::Session versions 2.0.0 through 2.1.0

Description The issue concerns the Rack::Session::Pool middleware, where simultaneous requests can restore a deleted session, allowing an unauthenticated user to occupy that session. If an attacker can acquire a session cookie and trigger a long-running request adjacent to the user logging out, they may retain illicit access even after the user has attempted to log out.

Recommendations

• Update to version 2.1.1 or later.
• Ensure your application invalidates sessions atomically by marking them as logged out, for example, using a logged out flag, instead of deleting them, and check this flag on every request to prevent reuse.
• Implement a custom session store that tracks session invalidation timestamps and refuses to accept session data if the session was invalidated after the request began.

Exploit

Fix

DoS

Insufficient Session Expiration

Time Of Check To Time Of Use

Race Condition

Weakness Enumeration

CWE-613

CWE-367

CWE-362

Related Identifiers

BDU:2025-07427

CVE-2025-46336

GHSA-9J94-67JR-4CQJ

GHSA-VPFW-47H7-XJ4G

OPENSUSE-SU-2025:15623-1

OPENSUSE-SU-2026:10359-1

Affected Products

Rack::Session

Red Os

References · 32

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46336.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack-session/CVE-2025-46336.yml · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2025-32441.yml · Exploit
• https://osv.dev/vulnerability/CVE-2025-46336 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15623-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-07427 · Security Note
• https://ubuntu.com/security/CVE-2025-46336 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10359-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46336 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-46336 · Security Note
• https://osv.dev/vulnerability/GHSA-vpfw-47h7-xj4g · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32441 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-46336 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-46336 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-9j94-67jr-4cqj · Vendor Advisory