CVE-2026-123510

3.3 LOWpublic exploit available

Published 2026-11-08 · Updated 2026-11-09

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Vikunja before 2.7.1 fails to re-anchor PluginsDir and LogPath to service.rootpath, allowing plugins to load from and logs to be written in the startup working directory. Local attackers able to write to that directory can plant plugins loaded into the server when plugins are enabled, or read misplaced logs including audit.log.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

Weaknesses

CWE-427

Public exploit & PoC references

https://github.com/go-vikunja/vikunja/security/advisories/GHSA-hrw2-p27j-8mj8

All references

https://github.com/go-vikunja/vikunja/security/advisories/GHSA-hrw2-p27j-8mj8
https://www.vulncheck.com/advisories/vikunja-before-2.7.1-plugin-and-log-directories-not-anchored-to-rootpath

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2019-16447
UNSCOREDCVE-2026-102438
HIGHCVE-2026-103665
HIGHCVE-2026-103845
HIGHCVE-2026-104349
UNSCOREDCVE-2026-104809
UNSCOREDCVE-2026-104989PoC
HIGHCVE-2026-106186

Related by shared AI tags and CWE weakness class. Browse the full archive.