CVE-2026-29056
Kanboard is project management software focused on Kanban methodology.
Published Mar 18, 2026 · updated Jun 17, 2026 · kanboard kanboard
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint ( ) accepts all POST parameters and passes them to without filtering out the field. An attacker who receives an invite link can inject in the registration form to create an administrator account. Version 1.2.51 fixes the issue.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 18, 2026 · NIST NVD
Detected
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint ( ) accepts all POST parameters and passes them to without filtering out the field. An attacker who receives an invite link can inject in the registration form to create an administrator account. Version 1.2.51 fixes the issue.
Jun 17, 2026 · NIST NVD
Updated
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint ( ) accepts all POST parameters and passes them to without filtering out the field. An attacker who receives an invite link can inject in the registration form to create an administrator account. Version 1.2.51 fixes the issue.
Affected
- cpe kanboard/kanboardversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-29056
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-29056
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint ( ) accepts all POST parameters and passes them to without filtering out the field. A
nvd.nist.gov