Skip to content
OpenAdvisories

Product · Leantime

JSON-RPC API

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-76647

    Leantime JSON-RPC API contains a missing authorization vulnerability

    Leantime JSON-RPC API through version 3.9.0 contains a missing authorization vulnerability in the JSON-RPC dispatcher in app/Domain/Api/Controllers/Jsonrpc.php. The dispatcher does not enforce authorization before invoking service-layer methods, allowing an a…

    Leantime JSON-RPC API