CVE-2026-54418 - Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.TwoFA.getSetupData, saveSecret, verifyAndEnable, and disable2FA, which act on a caller-supplied userId parameter with no ownership check, session pinning, or permission-attribute gate (unlike other RPC-exposed methods in the same dispatcher). - 漏洞详情

漏洞编号：CVE-2026-54418

风险等级：高危

漏洞来源：CVE

CVE 编号：CVE-2026-54418

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-862

发布/更新时间：2026-08-05 / 2026-08-28

漏洞描述

Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.TwoFA.getSetupData, saveSecret, verifyAndEnable, and disable2FA, which act on a caller-supplied userId parameter with no ownership check, session pinning, or permission-attribute gate (unlike other RPC-exposed methods in the same dispatcher).

漏洞描述

相关链接

相关漏洞