A vulnerability classified as problematic has been found in WeKan up to 8.18. Affected by this issue is some unknown functionality of the file server/publications/attachments.js of the component Attachment Metadata Handler. This manipulation causes information exposure through discrepancy.
This vulnerability is tracked as CVE-2026-25562. The attack is possible to be carried out remotely. No exploit exists.
It is recommended to upgrade the affected component.
