CVE-2025-5410 | Mist Community Edition up to 4.7.1 middleware.py session_start_response cross-site request forgery

A vulnerability was found in Mist Community Edition up to 4.7.1. It has been declared as problematic. This vulnerability affects the function session_start_response of the file src/mist/api/auth/middleware.py. The manipulation leads to cross-site request forgery.

This vulnerability was named CVE-2025-5410. The attack can be initiated remotely. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.