CVE-2026-105687 | Penpot up to 2.17.x delete-team-member RPC privileges management

October 5, 2026 Yanac

A vulnerability was found in Penpot up to 2.17.x. It has been declared as problematic. This vulnerability affects the function delete-team-member RPC. The manipulation results in improper privilege management.

This vulnerability is known as CVE-2026-105687. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More