Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-30954 EUVD-2026-10876

LinkAce has a Cross-User Tag/List Attachment IDOR in processTaxonomy()

Published Mar 10, 2026 · Updated Mar 11, 2026 · Assigned by GitHub_M

Description

LinkAce is a self-hosted archive to collect website links. In 2.1.0 and earlier, the processTaxonomy() method in LinkRepository.php allows authenticated users to attach other users' private tags and lists to their own links by passing integer IDs.

Affected products

VendorProductAffectedFixed
Kovah LinkAce <= 2.1.0 —

References