CVE-2026-67204 | BookStackApp BookStack up to 26.05.3 Image Gallery API access control

A vulnerability has been found in BookStackApp BookStack up to 26.05.3 and classified as problematic. The affected element is an unknown function of the component Image Gallery API. Performing a manipulation results in improper access controls.

This vulnerability is cataloged as CVE-2026-67204. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More