CVE-2026-17613: Penpot cross-team file takeover via import-binfile (unpatched in 2.17.2)
Penpot 2.17.2 still lacks the import-binfile permission check, leaving CVE-2026-17613 cross-team file takeover unpatched.
1 stories, newest first · one card per story
Penpot 2.17.2 still lacks the import-binfile permission check, leaving CVE-2026-17613 cross-team file takeover unpatched.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views