What is CVE-2026-80198?

CVE-2026-80198 is a high-severity vulnerability in Kimai, classified under Protection Mechanism Failure. CVSS score: 7.5/10. Published 2026-08-25.

How severe is CVE-2026-80198?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Kimai

CVE-2026-80198

Kimai versions before 2.56.0 fail to restrict the config() Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind passwords and SAML private keys into invoice or export documents accessible to lower-privileged users.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Kimai

Weakness classification (CWE)

CWE-693 — Protection Mechanism Failure

References

GitHub Security Advisory (GHSA-vrqv-52x7-rm4v) (vendor-advisory)
VulnCheck Advisory: Kimai before 2.56.0 Information Disclosure via config() Twig Function (third-party-advisory)

Frequently asked questions

What is CVE-2026-80198?: CVE-2026-80198 is a high-severity vulnerability in Kimai, classified under Protection Mechanism Failure. CVSS score: 7.5/10. Published 2026-08-25.
How severe is CVE-2026-80198?: High severity. CVSS v3 base score is 7.5 out of 10.