These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-05T08:16:33.777Z and has not been modified since then. Leantime 3.6.2 is affected by a vulnerability in its JSON-RPC methods, specifically leantime.rpc.TwoFA.TwoFA.getSetupData, saveSecret, verifyAndEnable, and disable2FA. These methods act on a caller-supplied userId parameter without ownership che [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-30T19:18:36.340Z and has not been modified since then. The Leantime 3.6.2 application contains a cross-site request forgery vulnerability. This vulnerability allows unauthenticated attackers to perform state-changing actions on behalf of authenticated users. The vulnerability exists due to the exclu [truncated]
Leantime 3.6.2 contains a server-side request forgery and local file inclusion vulnerability that allows authenticated attackers to read internal resources by passing unsanitized user-supplied filenames to file_get_contents() in the Blueprints::import() method without path validation. The vulnerability can be exploited through the JSON-RPC API endpoint, allowing attackers to access cloud metadata services [truncated]
CVE-2026-66414 is an open redirect vulnerability in Leantime 3.6.2's Login controller. This vulnerability allows unauthenticated attackers to redirect authenticated users to arbitrary external sites by manipulating the redirectUrl POST parameter, bypassing FILTER_SANITIZE_URL validation. The vulnerability has a CVSS score of 5.1, indicating medium severity. Administrators and users of Leantime 3.6.2 shoul [truncated]
CVE-2026-15510 is an improper authorization vulnerability in the Setting::saveSetting function of Leantime up to 3.8.0. The vulnerability allows for improper authorization and can be exploited remotely. The attack vector is network-based with low attack complexity and requires low privileges. Defenders of Leantime installations should review and apply patches to address the vulnerability. The CVE record w [truncated]
A vulnerability was found in Leantime up to 3.8.0, affecting the JSON-RPC Endpoint's editUser/addUser function. The manipulation of the role argument leads to improper authorization. This issue can be exploited remotely. The exploit has been publicly disclosed, and the vendor has not responded. The CVSS score is 2.1, indicating a low severity. Administrators and users of Leantime up to version 3.8.0 shoul [truncated]
The CVE record for CVE-2026-59713 was published on 2026-07-06T21:16:58.930Z and has not been modified since then. The NVD entry is currently Deferred. Leantime contains an OIDC login CSRF vulnerability in the verifyState() method that unconditionally returns true without validating state parameters. Attackers can craft malicious callback URLs with attacker-controlled authorization codes to perform session [truncated]
CVE-2026-59712 is a high-severity vulnerability in Leantime's JSON-RPC API. The Users::getUser method lacks proper authorization checks, allowing authenticated users to retrieve full user credential rows, including password hashes, TOTP secrets, and session tokens. This can be exploited to enumerate all accounts and obtain credentials for offline password cracking, 2FA bypass, and session hijacking.