PT-2026-32282 · Unknown · Solstice::Session

Robert Rothenberg · Published 2026-04-13 · Updated 2026-04-13 · CVE-2026-5085

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Solstice::Session versions prior to 1441

Description Session IDs are generated insecurely. The generateSessionID() method, also used by the generateID() method in Solstice::Subsession, produces an MD5 digest seeded by the epoch time, a random hash reference, the built-in rand() function, and the process ID. Because the epoch time can be guessed, stringified hash references contain predictable content, the rand() function is seeded by only 16-bits, and process IDs are drawn from a small set of numbers, the resulting session IDs are predictable. This could allow an attacker to gain unauthorized access to systems.

Recommendations Update to a version later than 1440.

Fix

Weakness Enumeration

CWE-340

CWE-338

Related Identifiers

CVE-2026-5085

Affected Products

Solstice::Session

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-5085 · Security Note
• https://metacpan.org/dist/Solstice/source/lib/Solstice/Session.pm#L481 · Note
• https://twitter.com/oss_security/status/2043698579244528038 · Twitter Post
• https://security.metacpan.org/docs/guides/random-data-for-security.html · Note
• https://twitter.com/CVEnew/status/2043733064137027946 · Twitter Post
• http://openwall.com/lists/oss-security/2026/04/13/2 · Note
• https://metacpan.org/dist/Solstice/source/lib/Solstice/Subsession.pm#L105 · Note
• https://twitter.com/VulmonFeeds/status/2043716809577156664 · Twitter Post