A vulnerability classified as problematic has been found in go-vikunja vikunja up to 2.1.x. Affected is an unknown function. This manipulation causes improper authorization in handler for custom url scheme.
This vulnerability appears as CVE-2026-33335. The attack may be initiated remotely. There is no available exploit.
It is recommended to upgrade the affected component.
