Medium severity · published Oct 5, 2026
CVE-2026-105695
Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session
5.9
CVSS
0.3%
EPSS
No
On KEV
Description
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scopes the lookup to the authenticated profile. An authenticated user who obtains another user's live, completed upload-session UUID can assemble the victim's chunks into the attacker's own file, team font, or project import, disclosing the uploaded bytes and deleting the victim's pending session. This issue is fixed in version 2.18.0.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:L
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PE
penpot · penpot
< 2.18.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-105695
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-105695
x_refsource_CONFIRM
https://github.com/penpot/penpot/security/advisories/GHSA-5vrm-3c6w-gjfv
x_refsource_MISC
https://github.com/penpot/penpot/pull/11012
x_refsource_MISC
https://github.com/penpot/penpot/commit/367e4d534c536c33d4f3fbad375f3e9c29b787a6
x_refsource_MISC
https://github.com/penpot/penpot/releases/tag/2.18.0
More from penpot
9.9
CVE-2026-105691
Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
9.9
CVE-2026-44986
Penpot: Pre-authenticated account takeover via team-invitation token + prepare-register-profile
8.8
CVE-2026-45805
Penpot: MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE
8.7
CVE-2026-47665
Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML
7.7
CVE-2026-45806
Penpot: Authenticated SSRF in remote image import via create-file-media-object-from-url