CVE-2026-52824 | Kimai up to 2.57.x EntryPoint docker/entrypoint.sh APP_SECRET random values

September 15, 2026 Yanac

A vulnerability was found in Kimai up to 2.57.x. It has been rated as problematic. This affects an unknown part of the file docker/entrypoint.sh of the component EntryPoint. This manipulation of the argument APP_SECRET causes insufficiently random values.

This vulnerability is handled as CVE-2026-52824. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More