CVE-2022-1955: Opft Session

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation.

Affected products

• Opft Session: version 1.13.0 only

Published 2022-06-30. Last modified 2026-06-17.