A vulnerability categorized as problematic has been discovered in WeKan up to 8.20. Affected by this issue is some unknown functionality of the file server/methods/positionHistory.js of the component Position-History Tracking. The manipulation results in missing authorization.
This vulnerability was named CVE-2026-1897. The attack may be performed from remote. There is no available exploit.
It is advisable to upgrade the affected component.
