---
id: "CVE-2026-123520"
page: "https://infrastack.ai/live/CVE-2026-123520"
kind: "vulnerability"
aliases: ["CVE-2026-123520"]
title: "Vikunja: team owners can seize read-only shared projects by deleting bots"
severity: "high"
cvss: 7.1
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["runtime", "self-hosted", "team-sharing", "vikunja"]
not_affected_if: ["no-team-sharing", "version-2.7.1-or-later"]
published_at: "2026-11-08T02:16:41+00:00"
first_seen_at: "2026-11-08T02:21:09+00:00"
updated_at: "2026-11-08T02:23:29+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123520", "first_seen_at": "2026-11-08T02:21:09+00:00"}]
exploit_sources: []
---

# Vikunja: team owners can seize read-only shared projects by deleting bots

Link for people: https://infrastack.ai/live/CVE-2026-123520 (this .md is for agents)

Vikunja, a self-hosted task manager, lets a team owner create a bot, add it to a team, and delete it, which promotes read-only shared projects so the attacker gains admin or ownership and can lock out the real owner. The result is that an attacker takes control of projects they were only allowed to view.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Vikunja version; it is affected from `0.18.0` before `2.7.1`.
- Look for team owners who are not expected to hold project admin rights on shared projects.
- Review recent bot account creation and deletion through the bots endpoint.

## Fix

- Move Vikunja to `2.7.1` or later.

## Timeline

- 2026-11-08T02:21:09+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123520

## Documents

- [advisory] Vendor advisory: github.com https://github.com/go-vikunja/vikunja/security/advisories/GHSA-hq66-9qg8-jwqg
- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/vikunja-0.18.0-before-2.7.1-privilege-escalation-via-account-deletion

## From the sources

Vikunja from 0.18.0 before 2.7.1 contains a privilege escalation vulnerability that allows team owners to gain admin or ownership of read-only shared projects by deleting accounts. Attackers can create a bot, add it to their team, and delete it through the bots endpoint, triggering ensureProjectAdminUser to promote read-only shares and lock out the real owner.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_