diff --git a/src/main/java/org/cbioportal/web/SessionServiceController.java b/src/main/java/org/cbioportal/web/SessionServiceController.java
index f0dfb1f5acd..b1f8b92fc7e 100644
--- a/src/main/java/org/cbioportal/web/SessionServiceController.java
+++ b/src/main/java/org/cbioportal/web/SessionServiceController.java
@@ -281,7 +281,7 @@ public ResponseEntity<List<VirtualStudy>> getUserStudies() throws JsonProcessing
         content = @Content(schema = @Schema(implementation = Session.class)))
     public ResponseEntity<Session> addSession(@PathVariable Session.SessionType type, @RequestBody JSONObject body)
             throws IOException {
-        //FIXME? anonymous user can create sessions. Do we really want that?
+        //FIXME? anonymous user can create sessions. Do we really want that? https://github.com/cBioPortal/cbioportal/issues/10843
         return addSession(type, Optional.empty(), body);
     }
 
@@ -289,7 +289,7 @@ public ResponseEntity<Session> addSession(@PathVariable Session.SessionType type
     @ApiResponse(responseCode = "200", description = "OK",
         content = @Content(schema = @Schema(implementation = Session.class)))
     public ResponseEntity<Session> addUserSavedVirtualStudy(@RequestBody JSONObject body) throws IOException {
-        //FIXME? anonymous user can create virtual studies. Do we really want that?
+        //FIXME? anonymous user can create virtual studies. Do we really want that? https://github.com/cBioPortal/cbioportal/issues/10843
         return addSession(Session.SessionType.virtual_study, Optional.of(SessionOperation.save), body);
     }