penpot

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

penpot records in CISA KEV

No penpot vulnerabilities are listed in CISA KEV.

Records

19 records

TI-2026-68335 CVE-2026-105691

OS command injection in Penpot SVG exporter via fill color

HIGH 76

Penpot is an open-source design and prototyping platform.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00462 Published 2026-10-05 Fixed in 2.18.0 CWE-78

TI-2026-32845 CVE-2026-44986

Penpot: Pre-authenticated account takeover via team-invitation token + prepare-register-profile

HIGH 76

Penpot is an open-source design tool for design and code collaboration.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00523 Published 2026-07-15 Fixed in 2.14.5 CWE-287

TI-2026-35172 CVE-2026-47665

Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML

HIGH 73

Penpot is an open-source design and prototyping platform.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00445 Published 2026-08-26 Fixed in 2.15.3 CWE-79

TI-2026-33540 CVE-2026-45805 · GHSA-22qr-rp27-j9wm

Penpot: MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE

HIGH 73

Penpot is an open-source design tool for design and code collaboration.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00379 Published 2026-07-15 Fixed in 2.15.0 CWE-749

TI-2026-14441 CVE-2026-17613 · GHSA-7ff3-w2cq-gmpq

Missing authorization in Penpot

HIGH 72

Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenticated user to overwrite any files on the target server and subscribe to WebSocket events, enabling full da…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00613 Published 2026-08-05 No fix listed CWE-862

TI-2026-33541 CVE-2026-45806

Penpot: Authenticated SSRF in remote image import via create-file-media-object-from-url

HIGH 67

Penpot is an open-source design tool for design and code collaboration.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00354 Published 2026-07-15 Fixed in 2.15.0 CWE-918

TI-2026-68333 CVE-2026-105689

SSRF guard bypass in Penpot via IPv6 transition addresses

HIGH 66

Penpot is an open-source design and prototyping platform.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00333 Published 2026-10-05 Fixed in 2.18.0 CWE-918

TI-2026-35173 CVE-2026-47666

Penpot: Stored XSS via custom font family name injected into a @font-face style rule

HIGH 66

Penpot is an open-source design and prototyping platform.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00347 Published 2026-08-26 Fixed in 2.15.3 CWE-79

TI-2026-68332 CVE-2026-105688

Privilege escalation to owner in Penpot team invitations

HIGH 65

Penpot is an open-source design and prototyping platform.

CVSS 3.1MEDIUM 6.7 Network High privileges No interaction EPSS 0.00332 Published 2026-10-05 Fixed in 2.18.0 CWE-269

TI-2026-68337 CVE-2026-105693

Share-link token disclosure and page scope bypass in Penpot

MEDIUM 63

Penpot is an open-source design and prototyping platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00281 Published 2026-10-05 Fixed in 2.18.0 CWE-862

TI-2026-68339 CVE-2026-105695

Missing authorization in Penpot chunk assembly exposes uploaded files

MEDIUM 60

Penpot is an open-source design and prototyping platform.

CVSS 3.1MEDIUM 5.9 Network Low privileges No interaction EPSS 0.00299 Published 2026-10-05 Fixed in 2.18.0 CWE-862

TI-2026-68338 CVE-2026-105694

Stored cross-site scripting in Penpot through unsanitized SVG uploads

MEDIUM 58

Penpot is an open-source design and prototyping platform.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00218 Published 2026-10-05 Fixed in 2.18.0 CWE-79

TI-2026-68330 CVE-2026-105686

Repeated chunk uploads in Penpot exhaust temporary media storage

MEDIUM 57

Penpot is an open-source design and prototyping platform.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00329 Published 2026-10-05 Fixed in 2.18.0 CWE-770

TI-2026-65006 CVE-2026-100868 · GHSA-hm3w-7xgf-hfwf

Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge

MEDIUM 57

Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00535 Published 2026-09-27 Fixed in 2.18.0 CWE-1327

TI-2026-68340 CVE-2026-105696

Penpot share links expose pages outside their authorized scope

LOW 29

Penpot is an open-source design and prototyping platform.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0028 Published 2026-10-05 Fixed in 2.18.0 CWE-862

TI-2026-68334 CVE-2026-105690

Penpot keeps sessions valid after logout, so stolen tokens still work

LOW 26

Penpot is an open-source design and prototyping platform.

CVSS 3.1MEDIUM 5.9 Network No auth User interaction EPSS 0.00218 Published 2026-10-05 Fixed in 2.18.0 CWE-613

TI-2026-68336 CVE-2026-105692

Penpot lets file editors delete share links created by others

LOW 24

Penpot is an open-source design and prototyping platform.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00219 Published 2026-10-05 Fixed in 2.18.0 CWE-284

TI-2026-68331 CVE-2026-105687

Team admins can remove the team owner in Penpot

LOW 22

Penpot is an open-source design and prototyping platform.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00292 Published 2026-10-05 Fixed in 2.18.0 CWE-269

TI-2026-68329 CVE-2026-105684

Penpot share links expose comments from pages outside their scope

LOW 19

Penpot is an open-source design and prototyping platform.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00193 Published 2026-10-05 Fixed in 2.18.0 CWE-200

Open these records in search →

Critical	2
High	5
Medium	12
Low	0
No CVSS	0