A vulnerability in JetBrains Ktor versions prior to 3.6.1 allows session forgery through tampered encrypted session cookies. This flaw enables an attacker with low privileges to manipulate session cookies, potentially leading to unauthorized access or impersonation of legitimate users. The vulnerability has a high severity score of 8.1 and impacts confidentiality and integrity but not availability.