CyberSecBulletin

OpenSlides vulnerabilities

We track 2 vulnerabilities in OpenSlides products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 4, 2026.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest OpenSlides vulnerabilities

  • 9.8 Critical severity

    OpenSlides: Improper Access Control

    CVE-2026-25519OpenSlides

    OpenSlides is a free, web based presentation and assembly system for managing and projecting agenda, motions and elections of an assembly. Prior to version 4.2.29, OpenSlides supports local logins with username and password or an optionally configurable single

  • 7.5 High severity

    openslides: Improper Privilege Management

    CVE-2024-22893OpenSlides

    OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing attack.