CVE-2026-105786 Joplin: Unauthenticated account takeover via an attacker-chosen application-authorisation identifier

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, packages/server/src/models/ApplicationModel.ts accepts a caller-chosen application authorization identifier, applications/:id/confirm binds that identifier to a logged-in use...

CVE-2026-105786

The open source note-taking application Joplin is vulnerable to an unauthenticated account takeover in versions prior to 3.7.13 . The root cause lies in packages/server/src/models/ApplicationModel.ts, which accepts a caller-chosen application authorization identifier, and the public endpoint pack...