CVE-2026-25924: Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a security control bypass vulnerability in Kanboard allows an…

PriorityP352high8.4CVSS 3.1

AVNACLPRHUIRSCCHIHAH

EPSS

0.49%

38.9th percentile

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a security control bypass vulnerability in Kanboard allows an authenticated administrator to achieve full Remote Code Execution (RCE). Although the application correctly hides the plugin installation interface when the PLUGIN_INSTALLER configuration is set to false, the underlying backend endpoint fails to verify this security setting. An attacker can exploit this oversight to force the server to download and install a malicious plugin, leading to arbitrary code execution. This vulnerability is fixed in 1.2.50.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
debian	kanboard	< kanboard 1.2.50+ds-1 (forky)	kanboard 1.2.50+ds-1 (forky)
kanboard	kanboard	< 1.2.50	1.2.50
kanboard	kanboard	>= 0 < 1.2.50+ds-1	1.2.50+ds-1

CVSS provenance

nvdv3.18.4HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

osv8.4HIGH

vendor_debian8.4HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.