Log in Start free

Vulnerability · Published Sep 25, 2026 · Assigned by GitHub_M

CVE-2026-85292InvoicePlane: Loose Type Comparison in Core Authentication Check (Defense-in-Depth)

Medium 4.8

In plain English

A medium-severity security flaw in InvoicePlane from InvoicePlane. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).

Severity (CVSS 3.1)4.8Medium
Exploit odds (30 days)0.3%top 83.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's User_Controller compares the session user_type value with the required role by using PHP's loose inequality operator. Under a non-standard session backend that returns unexpected scalar types, type juggling can cause a value that is not strictly the required role to pass the authorization check. This can permit authentication or authorization bypass in affected session configurations. This issue is fixed in version 1.7.2.

Affected products (as reported)

VendorProductVersions
InvoicePlane InvoicePlane < 1.7.2

Weakness: CWE-697 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

References