CVE-2026-45081 — Frappe HR: Permission Bypass in HRMS Leave Details API
Frappe HR is an open-source human resources management solution (HRMS). Prior to 16.5.0, authenticated employees could access other employees’ leave details due to improper auth…
Published: 2026-05-27 · CVSS: 6.5 · CVSS 3.1
Frappe HR is an open-source human resources management solution (HRMS). Prior to 16.5.0, authenticated employees could access other employees’ leave details due to improper authorization checks. This vulnerability is fixed in 16.5.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7