CVE-2026-49355 | opf openproject up to 17.3.x /api/v3/meetings information disclosure (GHSA-g387-6rm2-xw88)

June 26, 2026 Yanac

A vulnerability was found in opf openproject up to 17.3.x. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the file /api/v3/meetings. This manipulation causes information disclosure.

This vulnerability is tracked as CVE-2026-49355. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More