Dashboard / CVE-2026-66412

CVE-2026-66412

HIGH
MEDIUM Priority: 0.03 BB Relevance: 64/100
Published: 2026-07-27 Modified: 2026-11-08 First seen: 2026-11-08 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
AT: None
VC: High
VI: None
VA: None

Description

Leantime 3.6.2 and prior contains a broken access control vulnerability that allows authenticated users to read milestone data from projects they are not assigned to by supplying arbitrary integer milestone IDs to the tickets.getMilestone JSON-RPC endpoint. Attackers can enumerate integer milestone IDs through the JSON-RPC API to access project planning information, milestone titles, descriptions, and timelines across all projects on the instance regardless of project membership.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
Leantime Leantime 0

References & Advisories (4)

Bug Bounty Relevance

64 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

7.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.41%
Raw Score 0.004150
Percentile 36.3%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00415
2026-11-12
0.00415
2026-11-10
0.00415
2026-11-09
0.00415
2026-11-08
0.00415

Intelligence Sources

mitre ref →

External Links