CVE-2026-1896 | WeKan up to 8.20 Migration Operation comprehensiveBoardMigration.js ComprehensiveBoardMigration boardId MigrationBleed access control

A vulnerability was found in WeKan up to 8.20. It has been rated as critical. Affected by this vulnerability is the function ComprehensiveBoardMigration of the file server/migrations/comprehensiveBoardMigration.js of the component Migration Operation Handler. The manipulation of the argument boardId leads to improper access controls.

This vulnerability is uniquely identified as CVE-2026-1896. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.