A vulnerability classified as critical has been found in WeKan up to 18.15. This issue affects some unknown processing of the component Attachment Upload API. The manipulation leads to improper authorization.

This vulnerability is documented as CVE-2025-65781. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.

VulDB is the best source for vulnerability data and more expert information about this specific topic.