Vulnerability · Published Nov 8, 2026 · Assigned by VulnCheck
CVE-2026-123498Vikunja veans before 2.7.1 Prompt Injection via Project and Task Metadata
Low 3.7
In plain English
A low-severity security flaw in vikunja from go-vikunja. There are no confirmed reports of exploitation so far.
Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)–no EPSS score yet
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Vikunja veans before 2.7.1 contains a prompt injection vulnerability that allows project members with write access to inject instructions by setting project titles or task content rendered verbatim inside the coding agent's authoritative instruction block. Attackers can craft ProjectTitle or task descriptions that the prime hook loads on SessionStart and PreCompact, causing the agent to modify the developer's checkout or run commands.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| go-vikunja | vikunja | 0 – before 2.7.1 |
Weakness: CWE-1427 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
References
- GitHub Security Advisory (GHSA-cvh3-hf56-g9xm) vendor-advisory
- VulnCheck Advisory: Vikunja veans before 2.7.1 Prompt Injection via Project and Task Metadata third-party-advisory