OpenProject is an open-source, web-based project management software.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 5, 2026 · NIST NVD

   Detected

   OpenProject is an open-source, web-based project management software. Prior to versions 17.0.5 and 17.1.2, an attacker can create wiki pages belonging to unpermitted projects through an improperly authenticated request. This issue has been patched in versions 17.0.5 and 17.1.2.

2. Jun 17, 2026 · NIST NVD

   Updated

   OpenProject is an open-source, web-based project management software. Prior to versions 17.0.5 and 17.1.2, an attacker can create wiki pages belonging to unpermitted projects through an improperly authenticated request. This issue has been patched in versions 17.0.5 and 17.1.2.

Affected

• cpe openproject/openprojectversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-27723

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-27723

  OpenProject is an open-source, web-based project management software. Prior to versions 17.0.5 and 17.1.2, an attacker can create wiki pages belonging to unpermitted projects through an improperly authenticated request. This issue has been patched in versions 17.0.5 and 17.1.2.

  nvd.nist.gov

References

• Product · github.com
• Product · github.com
• Vendor Advisory · github.com