CVE-2025-51306: Gatling

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management.

Affected products

• Gatling Gatling: before 1.25.0 (fixed in 1.25.0)

Published 2025-08-06. Last modified 2026-06-17.