Authorization Bypass Vulnerability in ZenTao PMS by Easysoft
CVE-2026-114391

7.1HIGH

Key Information:

Vendor

Easysoft

Status
Zentaopms
Vendor
CVE Published:
21 October 2026

What is CVE-2026-114391?

ZenTao PMS versions before 22.3 exhibit an authorization bypass vulnerability within the commonModel::isOpenMethod() function. This flaw allows users with minimal privileges to bypass group-based access control checks on methods that include 'ajax' in their name. As a result, authenticated users could potentially exploit endpoints such as task.ajaxGetByID, system.ajaxDBAuthUrl, and admin.ajaxChangeTableEngine, gaining unauthorized access to sensitive data, retrieving database credentials, executing continuous integration jobs, and modifying database tables at will.

Affected Version(s)

zentaopms 0 < 22.3

References

https://github.com/easysoft/zentaopms/issues/181
issue-tracking
https://github.com/easysoft/zentaopms/commit/ac484f3b01c0...
patch
https://github.com/easysoft/zentaopms/releases/tag/zentao...
release-notes

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

lighthousekeeper1212
leediay153 from Viettel Post
.