CVE-2026-92802
kan through 0.6.0 Authorization Bypass via GitHub Project Import
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
kan through 0.6.0 fails to properly validate board creation permissions in the GitHub project import endpoint, allowing guests to create boards despite lacking board:create permission. Attackers can bypass authorization checks by using the importProjects mutation to create boards while remaining blocked on direct creation paths.
| CWE | CWE-862 |
| Vendor | kanbn |
| Product | kan |
| Published | Sep 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for kanbn kan
Be the first to know when new medium vulnerabilities affecting kanbn kan are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
Affected Versions
kanbn / kan
0 ≤ 0.6.0
References
github.com: https://github.com/kanbn/kan/issues/628 github.com: https://github.com/kanbn/kan github.com: https://github.com/kanbn/kan/blob/v0.6.0/packages/api/src/routers/import.ts#L622-L670 github.com: https://github.com/kanbn/kan/blob/f08920d/packages/api/src/routers/import.ts#L259 vulncheck.com: https://www.vulncheck.com/advisories/kan-through-0.6.0-authorization-bypass-via-github-project-import
Credits
George Chen