CVE-2026-1896: WeKan Migration Operation comprehensiveBoardMigration.js ComprehensiveBoardMigration MigrationBleed access control
A vulnerability has been found in WeKan up to 8.20. Affected by this vulnerability is the function ComprehensiveBoardMigration of the file server/migrations/comprehensiveBoardMigration.js of the component Migration Operation Handler. The manipulation of the argument boardId leads to improper access controls. The attack is possible to be carried out remotely. Upgrading to version 8.21 addresses this issue. The identifier of the patch is cc35dafef57ef6e44a514a523f9a8d891e74ad8f. Upgrading the affected component is advised.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1896?
CVE-2026-1896 is considered a high severity vulnerability due to its impact on access control in WeKan.
How do I fix CVE-2026-1896?
To fix CVE-2026-1896, upgrade WeKan to version 8.21 or later.
What versions of WeKan are affected by CVE-2026-1896?
CVE-2026-1896 affects WeKan versions up to and including 8.20.
What type of vulnerability is CVE-2026-1896?
CVE-2026-1896 is an access control vulnerability related to the ComprehensiveBoardMigration function.
Can CVE-2026-1896 be exploited remotely?
Yes, CVE-2026-1896 can potentially be exploited remotely if the affected software is accessible over the network.