CVE-2025-21618

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in incognito mode. This vulnerability is fixed in 2.9.1...

CVE-2025-21618

creationtimestamp| type| source ---|---|--- 2025-01-06 16:35:44+00:00| seen| https://infosec.exchange/users/cve/statuses/113782380555612442 2025-01-06 16:37:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/178 2025-01-06 17:16:49+00:00| seen|...

ai-plays-jackbox (>=0.0.1 <=0.3.2), air-link (>=0.3.0 <=0.5.0) +55 more potentially affected by CVE-2025-21618 via nicegui (>=2.11.0 <=2.8.1)

nicegui PYPI version =2.11.0, =0.0.1, =0.3.0, =0.3.0, =0.0.1, =0.8.0, =0.10.0, =0.0.1, =0.0.3, =1.11.0, =1.20.1 and more Source cves: CVE-2025-21618 Source advisory: SNYK:PYTHON-NICEGUI-8602522...

CVE-2025-21618

CVE-2025-21618 (NiceGUI) affects NiceGUI (Python UI framework) prior to version 2.9.1. The root cause is improper handling of authentication cookies/session state, causing a login in one browser (including incognito) to persist across all other browsers on the same user account. Impact is unautho...

CVE-2025-21618 NiceGUI On Air authentication issue

NiceGUI is an easy-to-use, Python-based UI framework. Prior to 2.9.1, authenticating with NiceGUI logged in the user for all browsers, including browsers in incognito mode. This vulnerability is fixed in 2.9.1...