CVE-2026-1895 | WeKan up to 8.20 Attachment Storage models/lists.js applyWipLimit ListWIPBleed access control

A vulnerability was found in WeKan up to 8.20. It has been declared as critical. Affected is the function applyWipLimit of the file models/lists.js of the component Attachment Storage Handler. Executing a manipulation can lead to improper access controls.

This vulnerability is handled as CVE-2026-1895. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.