CVE-2026-92802

EUVD-2026-81062
kan through 0.6.0 fails to properly validate board creation permissions in the GitHub project import endpoint, allowing guests to create boards despite lacking board:create permission. Attackers can bypass authorization checks by using the importProjects mutation to create boards while remaining blocked on direct creation paths.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
https://github.com/kanbn/kan
https://github.com/kanbn/kan/blob/f08920d/packages/api/src/routers/import.ts#L259
https://github.com/kanbn/kan/blob/v0.6.0/packages/api/src/routers/import.ts#L622-L670
https://github.com/kanbn/kan/issues/628
https://www.vulncheck.com/advisories/kan-through-0.6.0-authorization-bypass-via-github-project-import