CVE-2026-125374 | Krayin laravel-crm up to 2.2.7 Tag Controller attach/detach authorization

November 10, 2026 Yanac

A vulnerability identified as problematic has been detected in Krayin laravel-crm up to 2.2.7. Affected by this vulnerability is the function attach/detach of the component Tag Controller. This manipulation causes authorization bypass.

This vulnerability is tracked as CVE-2026-125374. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More