CVE-2026-112291 | Flarum Extension Manager up to 2.0.0-beta.7 TaskResource Index Endpoint extension-manager-tasks information disclosure

October 19, 2026 Yanac

A vulnerability labeled as problematic has been found in Flarum Extension Manager up to 2.0.0-beta.7. This vulnerability affects unknown code of the file /api/extension-manager-tasks of the component TaskResource Index Endpoint. Such manipulation leads to information disclosure.

This vulnerability is listed as CVE-2026-112291. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More