CVE-2026-52825

MEDIUM SEVERITY

Vulnerability Description

Kimai has Improper Authorization in Team Member and Team Activity Assignment APIs Which Allows Expansion of Team Scope Beyond Authorized Visibility

Published Date

July 14, 2026

Last Modified

July 14, 2026

Source

GitHub

Vendor

composer

Product

kimai/kimai