CVE-2026-55066 | go-vikunja Vikunja up to 2.3.x Kanban Move-Task Endpoint task_id authorization

August 28, 2026 Yanac

A vulnerability classified as critical has been found in go-vikunja Vikunja up to 2.3.x. This vulnerability affects unknown code of the component Kanban Move-Task Endpoint. The manipulation of the argument task_id leads to authorization bypass.

This vulnerability is listed as CVE-2026-55066. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More