From 7086ea6af61ede16c42e4bc6d02927af093687fb Mon Sep 17 00:00:00 2001
From: anupamme <mediratta@gmail.com>
Date: Sun, 9 Aug 2026 21:24:59 +0000
Subject: [PATCH] fix: V-001 security vulnerability

Automated security fix generated by OrbisAI Security
---
 src/codaro/api/publishedServerRouter.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/codaro/api/publishedServerRouter.py b/src/codaro/api/publishedServerRouter.py
index 48a24bf5..de681c02 100644
--- a/src/codaro/api/publishedServerRouter.py
+++ b/src/codaro/api/publishedServerRouter.py
@@ -74,6 +74,7 @@ def createSession(request: CreateSessionRequest | None = None) -> CreateSessionR
 
     @router.delete("/api/kernel/{sessionId}")
     def destroySession(sessionId: str) -> dict[str, bool]:
+        requireSession(sessionId)
         return {"destroyed": runtime.sessionManager.destroySession(sessionId)}
 
     @router.post("/api/kernel/{sessionId}/execute")