CVE-2026-108734 | Frappe CRM up to 1.87.0 Linked Documents Retrieval crm/api/doc.py crm.api.doc.get_linked_docs_of_document authorization

October 11, 2026 Yanac

A vulnerability described as problematic has been identified in Frappe CRM up to 1.87.0. This affects the function crm.api.doc.get_linked_docs_of_document of the file crm/api/doc.py of the component Linked Documents Retrieval. Executing a manipulation can lead to missing authorization.

This vulnerability appears as CVE-2026-108734. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More