EUVD-2025-211089

Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project, task, label or workspace identifiers to API routes lacking membership checks. Attackers who obtain identifiers, for example from shared project links,...

PT-2026-113759

Name of the Vulnerable Software and Affected Versions Kaneo versions prior to 2.1.6 Description Authenticated users can access other workspaces by providing project, task, label, or workspace identifiers to API routes that lack membership checks. This allows attackers who obtain identifiers, such...