{"uuid": "c0e8132c-8ff1-4991-bfd8-f3bce6672ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-68582", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117026155660414417", "content": "CVE-2026-68582 (CRITICAL): go-vikunja vikunja \u22642.3.0 allows attackers with a share link to read kanban bucket titles & user info from other tenants due to broken object auth at /projects/{project}/views/{view}/tasks. Update to 2.4.0+! https://radar.offseq.com/threat/cve-2026-68582-authorization-bypass-through-user-controlled-key-in-go-vikunja-vikunja-b2e26579de3aa2bc #OffSeq #CVE202668582 #Vulnerability", "creation_timestamp": "2026-08-02T13:30:24.696089Z"}