Researcher Earns $90K Google Bounty for Flask Cookie Key Leak RCE

Researcher Simon Koeck earned a $90,000 Google bug bounty for an RCE on developers.google.com. The flaw stemmed from Flask session cookies whose signing secret was itself embedded in the issued cookie, allowing cookie forgery and remote code execution.

2026-10-12 ~ 2026-10-14 · 3 related posts

• How a Flask cookie leaking an OAuth secret earned a $90,000 RCE bounty from Google — evilsocket · 2026-10-12
• Google pays $90,000 for DevSite flaw that let anyone run code without an account — rez0__ · 2026-10-14

1 near-duplicate retellings: jedisct1