CVE-2026-85990 - Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods
CVE ID :CVE-2026-85990 Published : Oct. 13, 2026, 5:17 p.m. | 14 minutes ago Description :Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime's JSON-RPC dispatcher in...