CVE-2026-61746 | InvenTree up to 1.3.x Plugin Settings privileges management

September 21, 2026 Yanac

A vulnerability identified as problematic has been detected in InvenTree up to 1.3.x. Affected by this vulnerability is an unknown functionality of the component Plugin Settings. The manipulation leads to improper privilege management.

This vulnerability is documented as CVE-2026-61746. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More