CVE-2026-62315 | Frappe up to 16.31.0 Client frappe/client.py frappe.client.set_value fieldname type confusion

August 20, 2026 Yanac

A vulnerability classified as critical was found in Frappe up to 16.31.0. Affected by this issue is the function frappe.client.set_value of the file frappe/client.py of the component Client. The manipulation of the argument fieldname results in type confusion.

This vulnerability is cataloged as CVE-2026-62315. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More