CVE-2026-2209 | WeKan up to 8.18 Custom Translation translationBody.js setCreateTranslation improper authorization

A vulnerability was found in WeKan up to 8.18 and classified as critical. The affected element is the function setCreateTranslation of the file client/components/settings/translationBody.js of the component Custom Translation Handler. The manipulation results in improper authorization.

This vulnerability is reported as CVE-2026-2209. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.