CVE-2026-29056
High
Description
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.51, Kanboard's user invite registration endpoint (`UserInviteController::register()`) accepts all POST parameters and passes them to `UserModel::create()` without filtering out the `role` field. An attacker who receives an invite link can inject `role=app-admin` in the registration form to create an administrator account. Version 1.2.51 fixes the issue.
SeverityHigh
CVSS8.8
Exploit probability—
ProductKanboard
PublishedMar 18, 2026
First seenMar 18, 2026
Weakness typeCWE-915CWE-915
How to fix
Update
- kanboard kanboard1.2.51 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kanboard kanboard | v < 1.2.51 | 1.2.51 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.