Usekaneo vulnerabilities
We track 3 vulnerabilities in Usekaneo products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2026.
Latest Usekaneo vulnerabilities
- 8.4 High severity
kaneo: Exposure of Sensitive Information to an Unauthorized Actor
Kaneo is a project management application with boards, Gantt charts, and GitHub integration that can be self-hosted or used as a cloud service. Prior to 2.13.0, GET /api/external-link/task/:taskId returns integration.config to any workspace member, including t
- 7.5 High severity
kaneo: Missing Authorization
Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project, task, label or workspace identifiers to API routes lacking membership checks. Attackers who obtain identifiers, f
- 8.1 High severity
kaneo: Missing Authorization
Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by exploiting the bulk task endpoint that omi