CVE-2026-27575

CVE-2026-27575 is a critical vulnerability affecting Vikunja, an open-source task management platform, prior to version 2.0.0. It allows users to set weak passwords and maintains active sessions even after a password change, enabling persistent access for attackers who compromise accounts. With a CVSS score of 9.1, this vulnerability is easily exploitable over the network with low complexity, potentially leading to full compromise of confidentiality and integrity. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness and potential future interest.