CVE-2026-105692 | Penpot up to 2.17.x Delete Share Link delete-share-link RPC share-link ID/share-link UUID privileges management

October 5, 2026 Yanac

A vulnerability labeled as problematic has been found in Penpot up to 2.17.x. The impacted element is the function delete-share-link RPC of the component Delete Share Link. Executing a manipulation of the argument share-link ID/share-link UUID can lead to improper privilege management.

The identification of this vulnerability is CVE-2026-105692. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More