High severity8.8NVD Advisory· Published Feb 7, 2026· Updated Jul 14, 2026

CVE-2026-25859

Description

Wekan versions prior to 8.20 allow non-administrative users to access migration functionality due to insufficient permission checks, potentially resulting in unauthorized migration operations.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Wekan Project/Wekan
cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*
Range: <8.20
Wekan/Wekanllm-fuzzy2 versions
<8.20+ 1 more
- (no CPE)range: <8.20
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

github.com/wekan/wekan/commit/cbb1cd78de3e40264a5e047ace0ce27f8635b4e6nvdPatch
www.vulncheck.com/advisories/wekan-migration-functionality-insufficient-permission-checksnvdThird Party Advisory
wekan.finvdProduct

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000