Vikunja veans prompt injection via project titles and task content

Vikunja veans before 2.7.1 contains a prompt injection vulnerability allowing project members with write access to inject instructions through project titles or task descriptions, potentially causing the coding agent to modify developer checkouts or run commands.

Disclosed 8 November 2026 · Record updated 8 November 2026

Impact

Project members with write access can inject malicious instructions via project titles or task content to manipulate the coding agent's behavior

Our coverage

A puppet master's fingers pull strings attached to a mechanical worker's limbs, making it execute hidden commands buried within innocent-looking blueprints.

Vulnerabilities

Vikunja project titles can hijack its coding agent

A flaw disclosed on 8 November 2026 lets any project member with write access plant instructions that the agent treats as authoritative.

8 Nov 2026

Sources

nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2026-123498