CVE-2025-65781 | WeKan up to 18.15 Attachment Upload API improper authorization

December 15, 2025 Yanac

A vulnerability classified as critical has been found in WeKan up to 18.15. This issue affects some unknown processing of the component Attachment Upload API. The manipulation leads to improper authorization.

This vulnerability is documented as CVE-2025-65781. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More