CVE-2026-84155

The CodeChecker web server contains a session management flaw where tokens remain valid after logout in multi-worker deployments . Because each API worker maintains an independent in-memory session cache , a logout request only clears the cache of the specific worker handling the request and the ...