CVE-2026-62367 | go-vikunja Vikunja up to 2.3.x OpenID Connect improper authentication

October 9, 2026 Yanac

A vulnerability, which was classified as critical, was found in go-vikunja Vikunja up to 2.3.x. This vulnerability affects unknown code of the component OpenID Connect. Such manipulation leads to improper authentication.

This vulnerability is uniquely identified as CVE-2026-62367. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More