A vulnerability was found in opf openproject up to 16.6.1 and classified as problematic. This affects an unknown part of the file /account/change_password. The manipulation results in improper restriction of excessive authentication attempts.
This vulnerability is identified as CVE-2026-22603. The attack can be executed remotely. There is not any exploit available.
It is suggested to upgrade the affected component.
