Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-56774— Kanboard - Cross-User Deletion of Persistent Login Sessions via Unvalidated Session ID

Quick assessment

Affected
kanboard kanboard
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Kanboard是Kanboard团队开源的一套开源的可视化任务板软件。该软件能够根据业务定制面板。 Kanboard 1.2.52及之前版本存在授权问题漏洞，该漏洞源于UserViewController::removeSession在将session id参数传递给RememberMeSessionModel::remove之前未能验证该参数，可能导致已认证的用户删除其他用户的“记住我”会话。攻击者可以枚举顺序会话ID并批量无效化任何用户（包括管理员）的持久登录会话，强制重新认证并造成拒绝服务。

CVSS 5.4 · Medium EPSS 0.48% · P39

Possible ATT&CK Techniques 1 AI

T1136.003 · Cloud Account

Affected Version Matrix 2

VendorProduct Version RangeStatus
kanboard kanboard ≤ 1.2.52 affected
928c68aa2b7c00092dd71084d329b912e229f3d1 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-56774

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Kanboard - Cross-User Deletion of Persistent Login Sessions via Unvalidated Session ID
Source: CVE Program / CVE List V5
Vulnerability Description
Kanboard through 1.2.52, fixed in commit 928c68a, UserViewController::removeSession fails to validate the session id parameter before passing it to RememberMeSessionModel::remove, allowing authenticated users to delete other users' Remember Me sessions. Attackers can enumerate sequential session IDs and mass-invalidate persistent login sessions of any user, including administrators, forcing re-authentication and causing denial of service.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Vulnerability Title
Kanboard 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Kanboard是Kanboard团队开源的一套开源的可视化任务板软件。该软件能够根据业务定制面板。 Kanboard 1.2.52及之前版本存在授权问题漏洞，该漏洞源于UserViewController::removeSession在将session id参数传递给RememberMeSessionModel::remove之前未能验证该参数，可能导致已认证的用户删除其他用户的“记住我”会话。攻击者可以枚举顺序会话ID并批量无效化任何用户（包括管理员）的持久登录会话，强制重新认证并造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
kanboard kanboard 0 ~ 1.2.52 -

II. Public POCs for CVE-2026-56774

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-56774

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-56774 (2)

Proof of Concept for CVE-2026-56774 (1)

News Coverage for CVE-2026-56774 (1)

IV. Related Vulnerabilities

Same product: kanboard
Same vendor: kanboard
Same weakness: CWE-639

V. Comments for CVE-2026-56774

No comments yet

Leave a comment