A vulnerability labeled as problematic has been found in pallets flask up to 3.1.2. Affected is an unknown function of the component Setting Handler. The manipulation results in use of cache containing sensitive information.

This vulnerability is known as CVE-2026-27205. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.