CVE-2026-33058

MEDIUM

6.5

Description

Kanboard is project management software focused on Kanban methodology. Versions prior to 1.2.51 have an authenticated SQL injection vulnerability. Attackers with the permission to add users to a project can leverage this vulnerability to dump the entirety of the kanboard database. Version 1.2.51 fixes the issue.

CVE Details

CVSS v3.1 Score6.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published3/18/2026

Last Modified3/18/2026

Sourcenvd

Honeypot Sightings0

Affected Products

kanboard:kanboard

Weaknesses (CWE)

CWE-89

References

https://github.com/kanboard/kanboard/security/advisories/GHSA-f62r-m4mr-2xhh(security-advisories@github.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.