What is the CVSS score of CVE-2026-29056?

CVE-2026-29056 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Ubuntu are affected by CVE-2026-29056?

Kanboard versions prior to 1.2.51 contain a critical privilege escalation vulnerability that allows any user receiving an invite link to self-elevate to administrator status, bypassing access…. A patch is available.

How to fix or mitigate CVE-2026-29056?

Within 24 hours: Identify all Kanboard instances and confirm current versions; disable user invite functionality if possible or restrict invite distribution to trusted channels only. Within 7 days: Contact Kanboard support and evaluate upgrade timeline to version 1.2.51; implement network segmentation to limit Kanboard access to internal networks only. Within 30 days: Upgrade all Kanboard instances to version 1.2.51 or later; audit user accounts created via invite links and verify role assignments; review access logs for suspicious administrator account creation.

Ubuntu CVE-2026-29056

EUVD-2026-12740 HIGH

Improperly Controlled Modification of Dynamically-Determined Object Attributes (CWE-915)

2026-03-18 GitHub_M

Code Injection Ubuntu Debian Kanboard

8.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Ubuntu

MEDIUM

qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 18, 2026 - 02:30 euvd

EUVD-2026-12740

Analysis Generated

Mar 18, 2026 - 02:30 vuln.today

CVE Published

Mar 18, 2026 - 01:56 nvd

HIGH 8.8

DescriptionGitHub Advisory

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint (UserInviteController::register()) accepts all POST parameters and passes them to UserModel::create() without filtering out the role field. An attacker who receives an invite link can inject role=app-admin in the registration form to create an administrator account. Version 1.2.51 fixes the issue.

AnalysisAI

Kanboard project management software contains a privilege escalation vulnerability in its user invite registration endpoint that allows invited users to inject the 'role=app-admin' parameter during account creation, granting themselves administrator privileges. This affects all Kanboard versions prior to 1.2.51. The vulnerability has documented proof-of-concept exploitation capability (CVSS E:P indicates PoC exists) and carries a CVSS 4.0 score of 7.0 with high integrity impact to both the vulnerable system and subsequent components.

Technical ContextAI

This vulnerability affects Kanboard (cpe:2.3:a:kanboard:kanboard), an open-source project management application based on the Kanban methodology. The root cause is CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes), commonly known as mass assignment vulnerability. The UserInviteController::register() endpoint accepts all POST parameters from user registration forms and passes them directly to UserModel::create() without implementing a parameter whitelist or filtering sensitive fields like 'role'. This allows attackers to modify object attributes that should be controlled exclusively by the application, specifically the user role assignment mechanism.

RemediationAI

Upgrade Kanboard to version 1.2.51 or later, which implements proper input filtering on the UserInviteController::register() endpoint to prevent role parameter injection. The fix is available through the official GitHub repository and detailed in the security advisory at https://github.com/kanboard/kanboard/security/advisories/GHSA-2jvj-q44v-6p3x. Organizations unable to immediately upgrade should implement compensating controls including monitoring user registration activity for anomalous role assignments, restricting invite link distribution to trusted recipients only, implementing additional authentication layers for administrative operations, and reviewing existing user accounts created through invite links for unauthorized privilege escalation. Consider temporarily disabling the user invite feature if mass assignment exploitation is detected until patching can be completed.