CVE-2026-31874

CVE-2026-31874 is a critical vulnerability affecting Taskosaur version 1.0.0, an open-source project management platform. This flaw allows an unauthenticated attacker to register a fully privileged SUPER_ADMIN account by manipulating the role parameter during user registration due to insufficient validation. With a CVSS score of 9.8 (Critical), this vulnerability presents a severe risk, enabling complete compromise of confidentiality, integrity, and availability via a low-complexity network attack. While there are currently no known public exploits, active exploitation, or significant community discussion, the ease of exploitation makes it a substantial threat.