PT-2026-27453 · Vikunja · Vikunja

Restriction

·

Publicado

2026-03-24

·

Atualizado

2026-03-31

·

CVE-2026-33680

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Vikunja versions prior to 2.2.2
Description Vikunja is a self-hosted task management platform. A flaw exists in the LinkSharing.ReadAll() method where authenticated users with link share access can list all link shares for a project, including their secret hashes. The ReadAllWeb handler bypasses access checks by not calling CanRead(), allowing an attacker with read-only link share access to retrieve hashes for write or admin link shares within the same project. This can lead to escalating privileges to full admin access. The vulnerable function is LinkSharing.ReadAll(). The affected API endpoint is ReadAllWeb.
Recommendations Update to version 2.2.2 or later.

Exploit

Correção

Improper Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

CVE-2026-33680
GHSA-8HP8-9FHR-PFM9
GO-2026-4848
SUSE-SU-2026:1135-1

Produtos afetados

Vikunja