PT-2026-26020 · Kanboard · Kanboard

Highfguillot · Published 2026-03-18 · Updated 2026-03-18 · CVE-2026-29056

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kanboard versions prior to 1.2.51

Description Kanboard is project management software focused on the Kanban methodology. The user invite registration endpoint (UserInviteController::register()) accepts all POST parameters and passes them to UserModel::create() without filtering the role field. An attacker receiving an invite link can inject role=app-admin into the registration form to create an administrator account. The role parameter is vulnerable to injection.

Recommendations Versions prior to 1.2.51 should be updated to version 1.2.51 or later.

Exploit

Fix

LPE

Weakness Enumeration

CWE-915

Related Identifiers

CVE-2026-29056

GHSA-2JVJ-Q44V-6P3X

Affected Products

Kanboard

References · 10

• 🔥 https://github.com/kanboard/kanboard/security/advisories/GHSA-2jvj-q44v-6p3x · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/29xxx/CVE-2026-29056.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-29056 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-29056 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-29056 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-29056 · Security Note
• https://twitter.com/TheHackerWire/status/2034359361062285753 · Twitter Post
• https://twitter.com/CVEnew/status/2034136421653475489 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2034114573922431445 · Twitter Post
• https://twitter.com/CVEarity/status/2034320407659172173 · Twitter Post