CVE-2026-41498 | Kimai up to 2.53.x Team API Endpoint authorization

May 8, 2026 Yanac

A vulnerability was found in Kimai up to 2.53.x and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Team API Endpoint. Such manipulation leads to missing authorization.

This vulnerability is listed as CVE-2026-41498. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More