Read the docs

usekaneo

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

usekaneo records in CISA KEV

No usekaneo vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-43914 CVE-2025-71433 · GHSA-qrhr-48pv-72cv

Missing authorization in Kaneo exposes other workspaces

Priority HIGH 69

Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project, task, label or workspace identifiers to API routes lacking membership che…

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00572 Published 2026-10-14 Fixed in 2.1.6 CWE-862
TI-2026-45053 CVE-2026-63104

Kaneo 2.3.12 < 2.12.2 Missing Authorization via Bulk Task Endpoint

Priority HIGH 65

Kaneo versions 2.3.12 before 2.12.2 contain a missing authorization vulnerability that allows authenticated workspace members with viewer or member roles to delete and modify tasks beyond their assigned permissions by ex…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00488 Published 2026-09-22 Fixed in 2.12.2 CWE-862
Open these records in search →