CVE-2026-25530 — Kanboard is missing authorization check in getSwimlane API allows cross-project data access
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, the getSwimlane API method lacks project-level authorization, allowing authenticated user…
Published: 2026-02-10 · CVSS: 4.3 · CVSS 3.1
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, the getSwimlane API method lacks project-level authorization, allowing authenticated users to access swimlane data from projects they cannot access. This vulnerability is fixed in 1.2.50.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7