RARgames vulnerabilities
We track 4 vulnerabilities in RARgames products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 18, 2026.
Latest RARgames vulnerabilities
- 7.6 High severity
4gaBoards: Improper Authentication
4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an authenticated user to modify ssoGoogleId, ssoGoogleEmail, ssoGithubId, ssoGithubUsername, ssoGithubEmail, ssoMicrosoftId, ssoMicrosoftEmail, ssoOidcId, and ssoOid
- 8.8 High severity
4gaBoards: Improper Authentication
4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover when registrationEnabled, localRegistrationEnabled, and ssoRegistrationEnabled are enabled and Google, GitHub, Microsoft, or OIDC SSO
- 8.8 High severity
4gaBoards: Improper Limitation of a Pathname to a Restricted Directory
4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project manager to supply traversal sequences in the filename parameter of GET /exports/:id/:filename. In server/api/controllers/boards/download.js,
- 7.6 High severity
4gaBoards: Improper Limitation of a Pathname to a Restricted Directory
4ga Boards is a boards system for realtime project management. Prior to 3.3.5, a path traversal vulnerability allows an authenticated user with board import privileges to make the server ingest arbitrary host files as board attachments during BOARDS archive im