CVE-2026-30954: LinkAce has a Cross-User Tag/List Attachment IDOR in processTaxonomy()
LinkAce is a self-hosted archive to collect website links. In 2.1.0 and earlier, the processTaxonomy() method in LinkRepository.php allows authenticated users to attach other users' private tags and lists to their own links by passing integer IDs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-30954?
CVE-2026-30954 is considered a medium severity vulnerability due to its impact on user privacy and data integrity.
How do I fix CVE-2026-30954?
To fix CVE-2026-30954, users should upgrade to LinkAce version 2.1.1 or later, which addresses this vulnerability.
What systems are affected by CVE-2026-30954?
CVE-2026-30954 affects all versions of LinkAce up to and including 2.1.0.
What does CVE-2026-30954 imply for user data security?
CVE-2026-30954 implies that authenticated users may gain unauthorized access to other users' private tags and lists, compromising user data security.
Is CVE-2026-30954 a local or remote vulnerability?
CVE-2026-30954 is a local vulnerability that requires authenticated user access to exploit.