What’s Vulnerable › Products
penpot vulnerabilities
20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 20 published in the last 12 months.
Check whether your penpot version is affected
Latest penpot vulnerabilities
- CVE-2026-105696 — Penpot: Share-link page-scope escalation: a share-link holder reads pages outside the link's authorized scope via the get-page RPC command (CVSS 6.5)
- CVE-2026-105695 — Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session (CVSS 5.9)
- CVE-2026-105694 — Penpot: Stored XSS via Unsanitised SVG Uploads (CVSS 5.4)
- CVE-2026-105693 — Penpot: Anonymous share-link token disclosure & page-scope bypass via get-view-only-bundle (CVSS 5.3)
- CVE-2026-105692 — Penpot: IDOR in Share-Link Deletion Allows Any File Editor to Delete Share-Links They Did Not Create (CVSS 5.4)
- CVE-2026-105691 — Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color (CVSS 9.9)
- CVE-2026-105690 — Penpot: Server-side session not invalidated on logout; stale auth-token cookie remains valid for full profile access (CVSS 5.9)
- CVE-2026-105689 — Penpot: SSRF guard bypass via IPv6 transition addresses (NAT64/6to4/Teredo) in webhook delivery and media download (CVSS 6.0)
- CVE-2026-105688 — Penpot: Team admin can escalate to owner via team invitation (missing owner-role guard on the invitation path) (CVSS 6.7)
- CVE-2026-105687 — Penpot: A team admin (non-owner) can remove the team owner via ::delete-team-member — missing owner-protection (CVSS 4.9)
- CVE-2026-105686 — Penpot: Repeated chunk index causes temporary-storage amplification (CVSS 5.3)
- CVE-2026-105684 — Penpot: Share-link page-scope escape — comment RPCs leak comment content, author identity, and all page-ids for pages outside the share scope (CVSS 4.3)
- CVE-2026-100868 — Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge (CVSS 6.3)
- CVE-2026-47666 — Penpot: Stored XSS via custom font family name injected into a @font-face style rule (CVSS 7.6)
- CVE-2026-47665 — Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML (CVSS 8.7)
- CVE-2026-17613 — CVE-2026-17613 (CVSS 7.5)
- CVE-2026-45806 — Penpot: Authenticated SSRF in remote image import via create-file-media-object-from-url (CVSS 7.7)
- CVE-2026-45805 — Penpot: MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE (CVSS 8.8)
- CVE-2026-44986 — Penpot: Pre-authenticated account takeover via team-invitation token + prepare-register-profile (CVSS 9.9)
- CVE-2026-26202 — Penpot has Arbitrary File Read via create-font-variant RPC endpoint (CVSS 7.5)