[ Vendor · 1 CVEs ]
Leantime
CVEs affecting Leantime published in the last 30 days, plus any Leantime CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-85990 | 13 Oct 2026 | CVSS 8.8 | Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC MethodsLeantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces… | Fix |