Live › vulnerability › CVE-2026-111640
Go to dashboardDooTask through 1.9.66 skips the membership check for dialogs with group type 'okr' in WebSocketDialog::checkDialog(). An authenticated user who supplies the dialog_id of an OKR comment dialog can read and inject messages through the message list and send endpoints.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Self-hosted or managed DooTask installations up to and including 1.9.66 where users with ordinary accounts can reach the messaging endpoints. Instances that restrict accounts to trusted staff have a smaller exposure but the flaw is still present. The sources do not say which versions after 1.9.66 are patched.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialog() that skips the membership check for dialogs with group_type 'okr'. Authenticated users can supply the dialog_id of OKR comment dialogs to msg__list, msg__one, or msg__send* endpoints to read and inject messages.
This page as .md · .json · in your agent: get_signal("CVE-2026-111640")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.