Session Rebinding Vulnerability in AshAdmin by Ash Project

CVE-2026-75757

What is CVE-2026-75757?

The AshAdmin application is vulnerable to session rebinding attacks due to its reliance on cookie values without sufficient validation checks. This vulnerability allows an attacker controlling a sibling subdomain to manipulate session cookies and potentially rebind an administrator’s session. The application fails to match cookie names precisely, allowing a compromised subdomain to set shadowing cookies. As a consequence, any attacker could exploit this flaw to send unvalidated cookie data into the admin's LiveSocket connection parameters. To mitigate this risk, it is essential to implement strict matching for cookie names to avoid unintended matches.

References