CVE-2026-55064 | go-vikunja Vikunja up to 2.3.x parent_project_id access control

August 28, 2026 Yanac

A vulnerability classified as problematic was found in go-vikunja Vikunja up to 2.3.x. This issue affects some unknown processing. The manipulation of the argument parent_project_id results in improper access controls.

This vulnerability is cataloged as CVE-2026-55064. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More