CVE-2026-105695 | Penpot up to 2.17.x Upload Session assemble-chunks improper authentication

A vulnerability was found in Penpot up to 2.17.x. It has been classified as critical. This affects the function assemble-chunks of the component Upload Session. The manipulation leads to improper authentication.

This vulnerability is traded as CVE-2026-105695. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More