CVE-2026-66412 | CyberRota

CyberRota Analysis

AI-Generated

Leantime versions 3.6.2 and earlier are vulnerable due to a broken access control issue that permits authenticated users to access milestone data from projects they are not assigned to by manipulating milestone IDs through the tickets.getMilestone JSON-RPC endpoint. This vulnerability allows attackers to enumerate milestone IDs, potentially exposing sensitive project planning information, including titles, descriptions, and timelines. Organizations using affected versions should prioritize remediation to protect sensitive project data from unauthorized access.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE

CVE-2026-66412

Severity

MEDIUM

CVSS

6.5

EPSS

0.31%

Original NVD Description

Leantime 3.6.2 and prior contains a broken access control vulnerability that allows authenticated users to read milestone data from projects they are not assigned to by supplying arbitrary integer milestone IDs to the tickets.getMilestone JSON-RPC endpoint. Attackers can enumerate integer milestone IDs through the JSON-RPC API to access project planning information, milestone titles, descriptions, and timelines across all projects on the instance regardless of project membership.