CVE-2026-85389CWE-639

CVE-2026-85389

Medium · published September 3, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
38.4
In the wild
Unconfirmed
What it is

Worklenz before 3.0.0 fails to verify task ownership by organization when resolving task-scoped API endpoints, allowing authenticated users to access another tenant's task data. Attackers can query task endpoints with arbitrary task UUIDs to retrieve work logs, comments, attachments, and project insights belonging to other organizations.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
7.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00454 · 38.4th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-09-03T23:17Z
References (6)
https://github.com/Worklenz/worklenz · [email protected]https://github.com/Worklenz/worklenz/blob/v3.0.0/worklenz-backend/src/middlewares/verify-task-access.ts · [email protected]https://github.com/Worklenz/worklenz/commit/f088ad0e36a23bb52857b46b3d4ce2533daeb65f · [email protected]https://github.com/Worklenz/worklenz/issues/396 · [email protected]https://github.com/Worklenz/worklenz/releases/tag/v3.0.0 · [email protected]https://www.vulncheck.com/advisories/worklenz-before-3.0.0-authorization-bypass-on-task-scoped-endpoints · [email protected]
EPSS history
Timeline
  • 05 SEP 03:44Z
    EPSS moved — → 0%
    epss
  • 03 SEP 18:54Z
    Worklenz before 3.0.0 Authorization Bypass on Task-Scoped Endpoints
    cvelistv5