Kanboard vulnerabilities
We track 11 vulnerabilities in Kanboard products. 11 are rated high or critical, and none are known to be exploited. The most recent was published on July 30, 2026.
Latest Kanboard vulnerabilities
- 8.5 High severity
Kanboard: Server-Side Request Forgery
Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP address notation in user-controlled URLs. Attackers can submit hexadecimal-encoded internal IP
- 8.1 High severity
kanboard: Authorization Bypass Through User-Controlled Key
Kanboard before 1.2.53, fixed in commit 564cc30, BoardAjaxController save() method (used by the kanban board drag-and-drop endpoint) validates the caller's role on the attacker-supplied project_id but never verifies that the supplied task_id actually belongs t
- 8.8 High severity
kanboard: Improperly Controlled Modification of Dynamically-Determined Object Attributes
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint (`UserInviteController::register()`) accepts all POST parameters and passes them to `UserModel::create()` without filtering out
- 8.4 High severity
kanboard: Incorrect Authorization
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a security control bypass vulnerability in Kanboard allows an authenticated administrator to achieve full Remote Code Execution (RCE). Although the application correctly hi
- 8.0 High severity
kanboard: Cross-Site Request Forgery
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a Cross-Site Request Forgery (CSRF) vulnerability exists in the ProjectPermissionController within the Kanboard application. The application fails to strictly enforce the a
- 9.1 Critical severity
kanboard: Improper Authentication
Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below is vulnerable to a critical authentication bypass when REVERSE_PROXY_AUTH is enabled. The application blindly trusts HTTP headers for user authentication without v
- 7.2 High severity
kanboard: Deserialization of Untrusted Data
Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.47, an unsafe deserialization vulnerability in the ProjectEventActvityFormatter allows admin users the ability to instantiate arbitrary php objects by modifyin
- 8.8 High severity
kanboard: Weak Password Recovery Mechanism for Forgotten Password
Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.46, Kanboard allows password reset emails to be sent with URLs derived from the unvalidated Host header when the application_url configuration is unset (defaul
- 7.2 High severity
kanboard: Improper Limitation of a Pathname to a Restricted Directory
Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can run arbitrary php code on the server in combination with a file write possibility. The user interface language is determined and loaded by the s
- 7.2 High severity
kanboard: Improper Limitation of a Pathname to a Restricted Directory
Kanboard is project management software that focuses on the Kanban methodology. An authenticated Kanboard admin can read and delete arbitrary files from the server. File attachments, that are viewable or downloadable in Kanboard are resolved through its `path`
- 8.8 High severity
kanboard: Improper Neutralization of Special Elements used in an SQL Command
Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31authenticated user is able to perform a SQL Injection, leading to a privilege escalation or loss of confidentiality. It appears that in some insert and u