CyberSecBulletin

Vikunja vulnerabilities

We track 1 vulnerability in Vikunja products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 10, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Vikunja vulnerabilities

  • 9.8 Critical severity

    Vikunja: Authorization Bypass Through User-Controlled Key

    CVE-2026-56765Vikunja

    Vikunja before 2.2.1 contains an authorization flaw where the LinkSharing.ReadAll endpoint exposes share hashes to users with read access, enabling permission escalation to admin-level shares. The GetTaskAttachment endpoint performs permission checks against u