usekaneo CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH usekaneo CVE published 2026-10-14

CVE-2025-71433

The vulnerability allows authenticated users to access other workspaces by supplying project, task, label or workspace identifiers to API routes lacking membership checks. This issue affects Kaneo instances before version 2.1.6. Defenders should assess exposure and implement compensating controls. The CVE record was published on 2026-10-14T14:16:30.251Z and has not been modified since then. The vulnerabil [truncated]