CVE-2026-125329

The project management application Kaneo is vulnerable to sensitive information disclosure in versions prior to 2.13.0 . The GET /api/external-link/task/:taskId endpoint improperly returns the integration.config object to any workspace member, including those with the viewer role, provided a task...