Privilege Escalation Vulnerability in Wekan Kanban Board System
CVE-2025-65780

8.8HIGH

Key Information:

Vendor

Wekan

Status
Wekan Kanban Board System
Vendor
CVE Published:
15 December 2025

What is CVE-2025-65780?

An issue in the Wekan Kanban Board System allows authenticated users to update their entire user document, including organizational details and login statuses, due to insufficient server-side authorization checks. This flaw enables a potential for privilege escalation and unauthorized access to other teams and organizations, posing significant security risks for users. The vulnerability impacts all versions up to 18.15 and has been addressed in version 18.16.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/wekan/wekan
https://wekan.fi/hall-of-fame/spacebleed/
https://github.com/wekan/wekan/blob/main/CHANGELOG.md#v81...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.