GO-2026-6308 Vikunja has cross-tenant IDOR in kanban move-task endpoint via unauthorized body task_id in code.vikunja.io/api

Vikunja has cross-tenant IDOR in kanban move-task endpoint via unauthorized body taskid in code.vikunja.io/api. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...

Vikunja has cross-tenant IDOR in kanban move-task endpoint via unauthorized body task_id

Summary The kanban endpoint POST /api/v1/projects/project/views/view/buckets/bucket/tasks moves a task into a bucket. The task is identified by taskid in the request body. The endpoint's authorization check TaskBucket.CanUpdate only verifies that the caller may update the project/view/bucket name...

CVE-2026-55066

Vikunja (open-source self-hosted task management) has a cross-tenant IDOR in the kanban move-task endpoint. The task_id field is attacker-controlled via the request body, yet TaskBucket.CanUpdate only authorizes the project/view/bucket from the URL — never the task itself. Because Task.ReadOne pe...

CVE-2026-55066 Vikunja: Cross-tenant IDOR in kanban move-task endpoint via unauthorized body task_id

Vikunja is an open-source self-hosted task management platform. Prior to 2.4.0, POST /api/v1/projects/project/views/view/buckets/bucket/tasks accepts a body supplied taskid but TaskBucket.CanUpdate in pkg/models/kanbantaskbucket.go authorizes only the project, view, and bucket from the URL...

CVE-2026-55066 Vikunja: Cross-tenant IDOR in kanban move-task endpoint via unauthorized body task_id

Vikunja is an open-source self-hosted task management platform. Prior to 2.4.0, POST /api/v1/projects/project/views/view/buckets/bucket/tasks accepts a body supplied taskid but TaskBucket.CanUpdate in pkg/models/kanbantaskbucket.go authorizes only the project, view, and bucket from the URL...

EUVD-2026-40962

In the Linux kernel, the following vulnerability has been resolved: schedext: Don't warn on NULL cgrpmovingfrom in scxcgroupmovetask A WARN fires when systemd's user manager writes "+cpu +memory +pids" to its own subtreecontrol while a schedext scheduler is loaded: WARNING: at...

CVE-2026-53328

In the Linux kernel, the following vulnerability has been resolved: schedext: Don't warn on NULL cgrpmovingfrom in scxcgroupmovetask A WARN fires when systemd's user manager writes "+cpu +memory +pids" to its own subtreecontrol while a schedext scheduler is loaded: WARNING: at...

PT-2026-54796

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where a warning is triggered in the scx cgroup move task function when a sched ext scheduler is loaded. This occurs when the systemd user manager writ...

SUSE CVE-2026-43439

In the Linux kernel, the following vulnerability has been resolved: cgroup: fix race between task migration and iteration When a task is migrated out of a cssset, cgroupmigrateaddtask first moves it from cset-tasks to cset-mgtasks via: listmovetail&task-cglist, &cset-mgtasks; If a csstaskiter...

kernel: sched_ext: Fix incorrect autogroup migration detection

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix incorrect autogroup migration detection scxmovetask is called from schedmovetask and tells the BPF scheduler that cgroup migration is being committed. schedmovetask is used by both cgroup and autogroup migrations an...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: schedext: Corrected incorrect autogroup migration detection. The function scxmovetask is called from schedmovetask, and it informs the BPF scheduler that cgroup migration is being performed. schedmovetask is used for both cgroup...

DEBIAN-CVE-2025-21771

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix incorrect autogroup migration detection scxmovetask is called from schedmovetask and tells the BPF scheduler that cgroup migration is being committed. schedmovetask is used by both cgroup and autogroup migrations an...

CVE-2025-21771

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix incorrect autogroup migration detection scxmovetask is called from schedmovetask and tells the BPF scheduler that cgroup migration is being committed. schedmovetask is used by both cgroup and autogroup migrations an...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the scxmovetask function not properly detecting automated group migrations, which could result in a warning...

PT-2025-8883

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to incorrect autogroup migration detection. The issue occurred because the scx move task function, which is called from sch...