CVE-2026-15509— Leantime JSON-RPC Endpoint addUser improper authorization
Possible ATT&CK Techniques 1AI
T1078.004 · Cloud AccountsGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-15509
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Leantime JSON-RPC Endpoint addUser improper authorization
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability has been found in Leantime up to 3.8.0. This impacts the function editUser/addUser of the component JSON-RPC Endpoint. The manipulation of the argument role leads to improper authorization. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不恰当
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Leantime | 3.0 | cpe:2.3:a:leantime:leantime:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-15509
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-15509
请登录查看更多情报信息。
Security Blog Posts for CVE-2026-15509 (1)
Same Patch Batch · n/a · 2026-07-12 · 3 CVEs total
| CVE-2026-15510 | 6.3 MEDIUM | Leantime API saveSetting improper authorization |
| CVE-2026-15478 | 6.3 MEDIUM | IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection |
IV. Related Vulnerabilities
Same product: Leantime
- CVE-2026-15510
Leantime API saveSetting improper authorization - CVE-2026-59712
Leantime - JSON-RPC API Broken Access Control via users.getU - CVE-2026-59713
Leantime - OIDC Login CSRF via Unconditional State Verificat - CVE-2023-45826
Authenticated SQL Injection in leantime - CVE-2023-33961
Leantime Stored Cross-site Scripting Vulnerability
Same vendor: n/a
- CVE-2026-15533
DedeCMS Column Management search.php code injection - CVE-2026-15530
WuzhiCMS Attachment API index.php listimage information disc - CVE-2026-15516
MacCMS Pro Installation Index.php step5 authorization - CVE-2026-15510
Leantime API saveSetting improper authorization - CVE-2026-15478
IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql
Same weakness: CWE-285
- CVE-2026-15510
Leantime API saveSetting improper authorization - CVE-2026-56313
Capgo - Cross-Organization Account Disruption via SSO Prelin - CVE-2026-56241
Capgo - RBAC Demotion Privilege Retention via Stale org_user - CVE-2026-15499
AstrBotDevs AstrBot Scheduled Task cron_tools.py FutureTaskT - CVE-2026-15474
Eleveo Call Recording Software audio.jsp improper authorizat
V. Comments for CVE-2026-15509
No comments yet