Security Advisory

CVE-2026-21881

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-08 01:08:01

Last updated 2026-01-08 17:13:05

Assigner GitHub_M

State PUBLISHED

Description

Kanboard is project management software focused on Kanban methodology. Versions 1.2.48 and below is vulnerable to a critical authentication bypass when REVERSE_PROXY_AUTH is enabled. The application blindly trusts HTTP headers for user authentication without verifying the request originated from a trusted reverse proxy. An attacker can impersonate any user, including administrators, by simply sending a spoofed HTTP header. This issue is fixed in version 1.2.49.

← Browse all CVEs View on cve.org ↗