Session Management Vulnerability in Admidio User Management Solution

CVE-2026-47234

What is CVE-2026-47234?

Admidio, an open-source user management solution, has a vulnerability where enabling debug logging exposes sensitive session information. Specifically, the functions Session::setCookie() and Session::start() log complete cookie values, including active session cookies and persistent auto-login cookies. If an attacker gains access to the log files, they could extract these credentials, compromising user sessions. The vulnerability is resolved in Admidio version 5.0.10, making it crucial for users to update to safeguard against potential exploits.

References