CVE-2026-123498

LowCVSS 3.7/10Last modified Nov 9, 2026

Description

Vikunja veans before 2.7.1 contains a prompt injection vulnerability that allows project members with write access to inject instructions by setting project titles or task content rendered verbatim inside the coding agent's authoritative instruction block. Attackers can craft ProjectTitle or task descriptions that the prime hook loads on SessionStart and PreCompact, causing the agent to modify the developer's checkout or run commands.

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

Affected software

VendorProductVersions
go-vikunjavikunja< 2.7.1

References

Timeline

Published
Nov 8, 2026
Last modified
Nov 9, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-1234995.9Vikunja veans before 2.7.1 contains a credential exposure vulnerability that allows malicious repository authors to capture API tokens by spCVE-2026-12356.5The WP eCommerce WordPress plugin through 3.15.1 unserializes user input via ajax actions, which could allow unauthenticated users to perforCVE-2026-123506.5IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that cCVE-2026-1235006.2Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read dump archives created with umask peCVE-2026-1235016.5Vikunja before 2.7.1 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server memory thCVE-2026-1235025.2Vikunja before 2.7.1 contains an information exposure vulnerability that allows log readers to obtain link-share hashes because the request CVE-2026-1235035.4Vikunja before 2.7.1 contains an improper authorization vulnerability in canDoBucket that allows users with project write access to delete bCVE-2026-1235044.3Vikunja from 0.22.0 before 2.7.1 contains an information disclosure vulnerability that allows read-only project members to view full webhookCVE-2026-1235055.5Vikunja before 2.7.1 contains an insecure file permissions vulnerability that allows local users to read stored data because localStorage.WrCVE-2026-1235065.4Vikunja from 2.2.0 before 2.7.1 contains an authorization bypass vulnerability that allows holders of tokens scoped only to projects_webhookCVE-2026-1235072.7Vikunja from 0.24.0 before 2.7.1 contains a nil pointer dereference vulnerability that allows project admins to break project views by savinCVE-2026-1235083.1Vikunja before 2.7.1 contains a supply chain vulnerability in its mage release targets that fetch the xgo module and Docker image by mutable
CVE-2026-123498: Low severity, CVSS 3.7 | Vulnix