CVE-2026-105693 | Penpot up to 2.17.x Share Link Management get-view-only-bundle improper authorization

October 5, 2026 Yanac

A vulnerability classified as problematic was found in Penpot up to 2.17.x. Affected by this vulnerability is the function get-view-only-bundle of the component Share Link Management. Such manipulation leads to improper authorization.

This vulnerability is listed as CVE-2026-105693. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More