CVE-2026-105411 — Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through…

CVE-2026-105411

Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 PUBLISHED

Description (CNA)

An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rights on one tracker to update or delete fields of all the trackers on the instance.

Affected (CNA)

Vendor / product	Versions
Dassault Systèmes / Tuleap Enterprise Edition	affected 17.0-1 through 17.0-41; affected 17.5-1 through 17.5-32

CWE

CWE-639

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-105411

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.