CVE-2025-32441

A flaw was found in Rack::Session::Pool middleware. This vulnerability allows an unauthenticated user to retain unauthorized access to a session after a user has attempted to log out. This issue occurs due to a race condition triggered by a long-running request adjacent to the time the user is logging out.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.