What is the CVSS score of CVE-2026-31874?

CVE-2026-31874 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Taskosaur are affected by CVE-2026-31874?

CVE-2026-31874 is a critical vulnerability in Taskosaur 1.0.0 that allows attackers to bypass role-based access controls during user registration, potentially granting unauthorized administrative…

How to fix or mitigate CVE-2026-31874?

Within 24 hours: Disable new user registration in Taskosaur 1.0.0 or restrict registration to trusted IP ranges; audit all user accounts created in the past 30 days for unauthorized privilege escalation. Within 7 days: Conduct a comprehensive access control review of all existing user roles and permissions; implement network segmentation to limit Taskosaur's lateral movement capabilities. Within 30 days: Migrate to a patched version immediately upon release; if no patch timeline is available, evaluate replacement solutions or complete decommissioning of the affected system.

Taskosaur CVE-2026-31874

CRITICAL

Improper Access Control (CWE-284)

2026-03-11 security-advisories@github.com

Authentication Bypass Taskosaur

9.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:07 vuln.today

CVE Published

Mar 11, 2026 - 19:16 nvd

CRITICAL 9.8

DescriptionGitHub Advisory

Taskosaur is an open source project management platform with conversational AI for task execution in-app. In 1.0.0, the application does not properly validate or restrict the role parameter during the user registration process. An attacker can manually modify the request payload and assign themselves elevated privileges. Because the backend does not enforce role assignment restrictions or ignore client-supplied role parameters, the server accepts the manipulated value and creates the account with SUPER_ADMIN privileges. This allows any unauthenticated attacker to register a fully privileged administrative account.