Penpot

Products

Exploited and recent CVEs

• CVE-2026-105696 Medium 6.5 Penpot: Share-link page-scope escalation: a share-link holder reads pages outside the link's authorized scope via the get-page RPC command 0.3%
• CVE-2026-105695 Medium 5.9 Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session 0.3%
• CVE-2026-105694 Medium 5.4 Penpot: Stored XSS via Unsanitised SVG Uploads 0.2%
• CVE-2026-105693 Medium 5.3 Penpot: Anonymous share-link token disclosure & page-scope bypass via get-view-only-bundle 0.3%
• CVE-2026-105692 Medium 5.4 Penpot: IDOR in Share-Link Deletion Allows Any File Editor to Delete Share-Links They Did Not Create 0.2%
• CVE-2026-105691 Critical 9.9 Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color 0.5%
• CVE-2026-105690 Medium 5.9 Penpot: Server-side session not invalidated on logout; stale auth-token cookie remains valid for full profile access 0.2%
• CVE-2026-105689 Medium 6.0 Penpot: SSRF guard bypass via IPv6 transition addresses (NAT64/6to4/Teredo) in webhook delivery and media download 0.3%
• CVE-2026-105688 Medium 6.7 Penpot: Team admin can escalate to owner via team invitation (missing owner-role guard on the invitation path) 0.3%
• CVE-2026-105687 Medium 4.9 Penpot: A team admin (non-owner) can remove the team owner via ::delete-team-member — missing owner-protection 0.3%
• CVE-2026-105686 Medium 5.3 Penpot: Repeated chunk index causes temporary-storage amplification 0.3%
• CVE-2026-105684 Medium 4.3 Penpot: Share-link page-scope escape — comment RPCs leak comment content, author identity, and all page-ids for pages outside the share scope 0.2%
• CVE-2026-100868 Medium 6.3 Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge 0.5%
• CVE-2026-100868 Medium 6.3 Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge 0.5%
• CVE-2026-47665 High 8.7 Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML 0.4%
• CVE-2026-47666 High 7.6 Penpot: Stored XSS via custom font family name injected into a @font-face style rule 0.3%
• CVE-2026-17613 High 7.5 CVE-2026-17613 0.6%
• CVE-2026-45805 High 8.8 Penpot: MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE 0.4%
• CVE-2026-44986 Critical 9.9 Penpot: Pre-authenticated account takeover via team-invitation token + prepare-register-profile 0.5%
• CVE-2026-45806 High 7.7 Penpot: Authenticated SSRF in remote image import via create-file-media-object-from-url 0.4%
• CVE-2026-26202 High 7.5 Penpot has Arbitrary File Read via create-font-variant RPC endpoint 0.5%