CVE-2026-105684 | Penpot up to 2.17.x Comment Retrieval check-comment-permissions privileges management

October 5, 2026 Yanac

A vulnerability was found in Penpot up to 2.17.x and classified as problematic. Affected by this issue is the function check-comment-permissions of the component Comment Retrieval. Executing a manipulation can lead to improper privilege management.

This vulnerability appears as CVE-2026-105684. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More