EUVD-2026-12740
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4Description
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint (`UserInviteController::register()`) accepts all POST parameters and passes them to `UserModel::create()` without filtering out the `role` field. An attacker who receives an invite link can inject `role=app-admin` in the registration form to create an administrator account. Version 1.2.51 fixes the issue.
Analysis
Kanboard project management software contains a privilege escalation vulnerability in its user invite registration endpoint that allows invited users to inject the 'role=app-admin' parameter during account creation, granting themselves administrator privileges. This affects all Kanboard versions prior to 1.2.51. …
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Identify all Kanboard instances and confirm current versions; disable user invite functionality if possible or restrict invite distribution to trusted channels only. Within 7 days: Contact Kanboard support and evaluate upgrade timeline to version 1.2.51; implement network segmentation to limit Kanboard access to internal networks only. …
Sign in for detailed remediation steps.
Priority Score
Vendor Status
Ubuntu
Priority: MediumDebian
Bug #1131198| Release | Status | Fixed Version | Urgency |
|---|---|---|---|
| forky, sid | fixed | 1.2.51+ds-1 | - |
| (unstable) | fixed | 1.2.51+ds-1 | - |
Share
External POC / Exploit Code
Leaving vuln.today