CVE-2026-68582-PoC

CVE-2026-68582 — Vikunja Link-Share BOLA Working PoC for CVE-2026-68582 / GHSA-rj9j-8772-4h6c , a broken object level authorization BOLA vulnerability in Vikunja's task-collection endpoint where a link-share token can read cross-tenant kanban buckets. Advisory :...

CVE-2026-123522

Vikunja before 2.7.1 contains an authorization bypass vulnerability that allows authenticated users to read any task by injecting a crafted task object into a no-op Kanban bucket move. Attackers can set task.id to a victim task and task.projectid to their own project, routing full task contents t...

CVE-2026-123518

Vikunja before 2.7.1 contains an incorrect authorization vulnerability in TaskBucket.CanUpdate, which checks write access to the bucket's project and to the task separately but never verifies that both belong to the same project. Authenticated users with write access to two projects can move a ta...

CVE-2026-123509

Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows project writers or view admins to create unlimited kanban buckets due to missing count caps. Attackers can create thousands of buckets so every kanban read runs a task SELECT and COUNT per bucket,...

EUVD-2026-119407

Vikunja before 2.7.1 contains an authorization bypass vulnerability that allows authenticated users to read any task by injecting a crafted task object into a no-op Kanban bucket move. Attackers can set task.id to a victim task and task.projectid to their own project, routing full task contents t...

CVE-2026-123522

Vikunja versions prior to 2.7.1 are vulnerable to an authorization bypass vulnerability. An authenticated attacker can disclose any task's content by injecting a crafted task object into a no-op Kanban bucket move operation. By setting the task.id to a victim's task and the task.project_id to the...

CVE-2026-123522 Vikunja before 2.7.1 Task Information Disclosure via Kanban Bucket Move Webhook

Vikunja before 2.7.1 contains an authorization bypass vulnerability that allows authenticated users to read any task by injecting a crafted task object into a no-op Kanban bucket move. Attackers can set task.id to a victim task and task.projectid to their own project, routing full task contents t...

CVE-2026-123522 Vikunja before 2.7.1 Task Information Disclosure via Kanban Bucket Move Webhook

Vikunja before 2.7.1 contains an authorization bypass vulnerability that allows authenticated users to read any task by injecting a crafted task object into a no-op Kanban bucket move. Attackers can set task.id to a victim task and task.projectid to their own project, routing full task contents t...

CVE-2026-123522 Vikunja before 2.7.1 Task Information Disclosure via Kanban Bucket Move Webhook

Vikunja before 2.7.1 contains an authorization bypass vulnerability that allows authenticated users to read any task by injecting a crafted task object into a no-op Kanban bucket move. Attackers can set task.id to a victim task and task.projectid to their own project, routing full task contents t...

EUVD-2026-119403

Vikunja before 2.7.1 contains an incorrect authorization vulnerability in TaskBucket.CanUpdate, which checks write access to the bucket's project and to the task separately but never verifies that both belong to the same project. Authenticated users with write access to two projects can move a ta...

CVE-2026-123509

Versions of Vikunja prior to 2.7.1 are vulnerable to a Denial of Service (DoS) condition caused by an uncontrolled resource consumption flaw. Specifically, the application lacks count caps on kanban buckets , allowing project writers or view admins to create an unlimited number of buckets. This e...

CVE-2026-123509 Vikunja before 2.7.1 Denial of Service via Unbounded Kanban Bucket Count

Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows project writers or view admins to create unlimited kanban buckets due to missing count caps. Attackers can create thousands of buckets so every kanban read runs a task SELECT and COUNT per bucket,...

CVE-2026-123509 Vikunja before 2.7.1 Denial of Service via Unbounded Kanban Bucket Count

Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows project writers or view admins to create unlimited kanban buckets due to missing count caps. Attackers can create thousands of buckets so every kanban read runs a task SELECT and COUNT per bucket,...

CVE-2026-123509 Vikunja before 2.7.1 Denial of Service via Unbounded Kanban Bucket Count

Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows project writers or view admins to create unlimited kanban buckets due to missing count caps. Attackers can create thousands of buckets so every kanban read runs a task SELECT and COUNT per bucket,...

EUVD-2026-119394

Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows project writers or view admins to create unlimited kanban buckets due to missing count caps. Attackers can create thousands of buckets so every kanban read runs a task SELECT and COUNT per bucket,...

CVE-2026-123507

The project management software Vikunja (versions 0.24.0 before 2.7.1) is vulnerable to a nil pointer dereference (CWE-476) in its bucket filter handling. Project admins can trigger a Denial of Service (DoS) by saving a filter-mode bucket configuration containing a null filter. Because the valida...

CVE-2026-123507 Vikunja 0.24.0 before 2.7.1 Denial of Service via Nil Bucket Filter

Vikunja from 0.24.0 before 2.7.1 contains a nil pointer dereference vulnerability that allows project admins to break project views by saving a filter-mode bucket configuration with a null filter. Because validateProjectViewFilters skips nil entries, every subsequent read of the view panics in...

CVE-2026-123507 Vikunja 0.24.0 before 2.7.1 Denial of Service via Nil Bucket Filter

Vikunja from 0.24.0 before 2.7.1 contains a nil pointer dereference vulnerability that allows project admins to break project views by saving a filter-mode bucket configuration with a null filter. Because validateProjectViewFilters skips nil entries, every subsequent read of the view panics in...

PT-2026-139790

Name of the Vulnerable Software and Affected Versions Vikunja versions prior to 2.7.1 Description An uncontrolled resource consumption issue exists where project writers or view admins can create an unlimited number of kanban buckets because count caps are missing. This allows an attacker to crea...

CVE-2026-123507: go-vikunja vikunja: Vikunja from 0.24.0 before 2.7.1 contains a nil pointer dereference vulnerability that allows project admins to break…

Vikunja from 0.24.0 before 2.7.1 contains a nil pointer dereference vulnerability that allows project admins to break project views by saving a filter-mode bucket configuration with a null filter. Because validateProjectViewFilters skips nil entries, every subsequent read of the view panics in...