CVE-2026-79313

Name of the Vulnerable Software and Affected Versions web.py version 0.76

Description Insufficient Session Expiration occurs because session management relies on periodic cleanup to expire sessions rather than verifying the last-access time during session loading. This allows a previously valid session cookie to be replayed and used to access protected resources after the configured idle timeout, provided the session record has not yet been removed by the cleanup process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.