CVE-2026-27835 | wger-project wger up to 2.4 authorization (GHSA-xf68-8hjw-7mpm)

A vulnerability categorized as problematic has been discovered in wger-project wger up to 2.4. This vulnerability affects the function RepetitionsConfigViewSet/MaxRepetitionsConfigViewSet. Executing a manipulation can lead to authorization bypass.

This vulnerability is handled as CVE-2026-27835. The attack can be executed remotely. There is not any exploit available.

It is advisable to implement a patch to correct this issue.