CVE-2026-111920 | go-vikunja Vikunja 2.6.0 Project Access project_access.go getProjectAccessForUser access control

October 17, 2026 Yanac

A vulnerability classified as problematic was found in go-vikunja Vikunja 2.6.0. This affects the function getProjectAccessForUser of the file pkg/models/project_access.go of the component Project Access. The manipulation results in improper access controls.

This vulnerability was named CVE-2026-111920. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More