What is the CVSS score of CVE-2026-17613?

CVE-2026-17613 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.4%.

Which versions of Penpot are affected by CVE-2026-17613?

A critical authorization flaw in Penpot (CVE-2026-17613) with publicly available exploit code enables file overwriting and data exfiltration across team boundaries, affecting all deployments through…

How to fix or mitigate CVE-2026-17613?

Within 24 hours: identify all Penpot instances and confirm versions (target versions ≤2.17.0); if using Penpot ≤2.17.0 and handling sensitive design data, prepare for temporary disable or network isolation pending patch release. Within 7 days: implement network segmentation to restrict Penpot WebSocket traffic to known users and IPs, enable comprehensive audit logging for file access and WebSocket subscription events, and notify affected teams of file integrity risks. Within 30 days: monitor Penpot's official releases for patched versions >2.17.0, conduct testing, and upgrade all instances immediately upon patch availability; verify that file import and WebSocket access restrictions are properly re-applied after upgrade.

Penpot CVE-2026-17613

EUVD-2026-53386 HIGH

Missing Authorization (CWE-862)

2026-08-05 certcc

GHSA-7ff3-w2cq-gmpq

Authentication Bypass Penpot

7.5

CVSS 3.1 · Vendor: certcc

Severity by source

Vendor (certcc) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

8.8 HIGH

Requires valid authenticated account (PR:L not PR:N); file overwrite and WebSocket exfiltration yield full C/I/A impact against targeted files.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (certcc).

CVSS VectorVendor: certcc

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Source Code Evidence Fetched

Aug 05, 2026 - 17:35 vuln.today

Analysis Generated

Aug 05, 2026 - 17:35 vuln.today

CVSS changed

Aug 05, 2026 - 16:22 NVD

7.5 (HIGH)

CVE Published

Aug 05, 2026 - 14:12 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 05, 2026 - 14:12 cve.org

HIGH 7.5

DescriptionCVE.org

Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenticated user to overwrite any files on the target server and subscribe to WebSocket events, enabling full data exfiltration and data poisoning.

AnalysisAI

Missing authorization on Penpot's ::import-binfile RPC command allows any authenticated user to overwrite arbitrary files across team boundaries and subscribe to WebSocket events for any file on the instance, enabling cross-tenant data exfiltration and data poisoning. All Penpot deployments on versions up to and including 2.17.0 are affected per EUVD intelligence, with a proof-of-concept publicly documented by vokecyber.com. The provided CVSS vector critically understates impact: it omits confidentiality and integrity loss despite the described full data exfiltration and file overwrite capability, and marks the vulnerability as unauthenticated (PR:N) contrary to the description's explicit 'authenticated user' requirement - defenders should not rely on the published vector for risk prioritization.

Technical ContextAI

Penpot is an open-source, web-based design and prototyping platform (cpe:2.3:a:penpot:penpot) offering a self-hosted alternative to Figma, with both cloud and self-hosted deployment modes. Its backend exposes RPC (Remote Procedure Call) commands for collaboration features, including ::import-binfile for importing binary project files. The root cause is CWE-862 (Missing Authorization): the server authenticates the calling user but performs no authorization check on the optional file-id parameter, failing to verify whether the authenticated caller has rights to the target file. This allows any low-privilege account holder to reference and operate on files belonging to other teams or users. The WebSocket subscription mechanism compound the flaw by enabling real-time event streaming from arbitrary file IDs, converting a write-only injection primitive into a bidirectional data channel for exfiltration.

RemediationAI

The primary remediation is to upgrade Penpot to a version confirmed to contain the authorization fix for ::import-binfile. The GitHub release tag for 2.17.0 (https://github.com/penpot/penpot/releases/tag/2.17.0) is referenced in the CVE, suggesting it may contain the fix, but EUVD lists ≤2.17.0 as affected - administrators should verify with the Penpot team whether 2.17.0 or a subsequent release (e.g., 2.17.1 or later) is the confirmed patched version before upgrading. Consult the vokecyber research advisory at https://vokecyber.com/research/cve-2026-17613-penpot-cross-team-file-takeover for researcher-confirmed fix details. As a compensating control if immediate upgrade is not possible, restrict account creation to trusted users only and audit existing accounts - since exploitation requires a valid account, eliminating untrusted accounts directly limits the attack surface. Network-level controls (e.g., placing the Penpot instance behind a VPN or IP allowlist) reduce exposure but do not eliminate risk from insider threat actors with legitimate credentials. Disabling or rate-limiting RPC access from untrusted network segments is a viable interim measure with the trade-off of potential disruption to remote collaborators.