A vulnerability, which was classified as problematic, was found in WeKan up to 8.20. This issue affects some unknown processing of the file server/publications/activities.js of the component Activity Publication Handler. Executing a manipulation can lead to information disclosure.
This vulnerability is registered as CVE-2026-2207. It is possible to launch the attack remotely. No exploit is available.
You should upgrade the affected component.
