Hotwired

hotwired

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Turbo

turbo

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-66803 1Hotwired 1Turbo Jun 17, 2026 Jan 20, 2026 N/A· v4 4.8 MEDIUM· v3 N/A· v2 Race condition in the turbo-frame element handler in Hotwired Turbo before 8.0.x causes logout operations to fail when delayed frame responses reapply session cookies after logout. This can be exploited by remote attacke...Show more Race condition in the turbo-frame element handler in Hotwired Turbo before 8.0.x causes logout operations to fail when delayed frame responses reapply session cookies after logout. This can be exploited by remote attackers via selective network delays (e.g. delaying requests based on sequence or timing) or by physically proximate attackers when the race condition occurs naturally on shared computers.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2025-66803

1Hotwired

1Turbo

Jun 17, 2026

Jan 20, 2026

N/A· v4

4.8 MEDIUM· v3

N/A· v2

Race condition in the turbo-frame element handler in Hotwired Turbo before 8.0.x causes logout operations to fail when delayed frame responses reapply session cookies after logout. This can be exploited by remote attackers via selective network delays (e.g. delaying requests based on sequence or timing) or by physically proximate attackers when the race condition occurs naturally on shared computers.Show less