← CVE Intelligence

CVE-2026-45081

Frappe HR: Permission Bypass in HRMS Leave Details API PUBLISHED

Description (CNA)

Frappe HR is an open-source human resources management solution (HRMS). Prior to 16.5.0, authenticated employees could access other employees’ leave details due to improper authorization checks. This vulnerability is fixed in 16.5.0.

Affected (CNA)

Vendor / productVersions
frappe / hrmsaffected < 16.5.0

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.