CVE-2026-62376

Summary

Vikunja stores sensitive authentication tokens in plaintext within its database, allowing attackers with database read access to immediately hijack user accounts without needing valid passwords. This creates a critical risk where stolen backups or misconfigured databases can lead to immediate account takeovers.

Exploitability

Exploitation is relatively easy for attackers who gain read access to the database, requiring no additional credentials or complex attack chains beyond accessing the user_tokens table.

Blast radius

The impact could be widespread across all affected users whose tokens are stored in the vulnerable database, potentially leading to complete account compromise and unauthorized access to task management data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 2.4.0 or later to fix the plaintext token storage vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.