If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists.

If an attacker comes into the possession of a victim's OctoPrint sessi ...

OctoPrint vulnerable to Insufficient Session Expiration.