CVE-2026-105696 | Penpot up to 2.17.x Share Link Permission get-page/get-file-fragment page-id privileges management

October 5, 2026 Yanac

A vulnerability was found in Penpot up to 2.17.x. It has been rated as problematic. This issue affects the function get-page/get-file-fragment of the component Share Link Permission. This manipulation of the argument page-id causes improper privilege management.

This vulnerability is handled as CVE-2026-105696. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More