SQL Injection in Kanboard

CVE-2026-33058

Kanboard is project management software focused on Kanban methodology. Versions prior to 1.2.51 have an authenticated SQL injection vulnerability. Attackers with the permission to add users to a project can leverage this vulnerability to d…

Vulnerability class: SQL Injection

EPSS: 0.000 (11.2th percentile) — read the EPSS interpretation.

Affected products

Kanboard — versions < 1.2.51

Weakness classification (CWE)

CWE-89 — SQL Injection

References

https://github.com/kanboard/kanboard/security/advisories/GHSA-f62r-m4mr-2xhh (x_refsource_CONFIRM)