Advisories · Technology
penpot.
Every CVE that names penpot among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Penpot: Share-link page-scope escalation: a share-link holder reads pages outside the link's authorized scope via the get-page RPC command
- penpot
- Broken access control
- CVSS 5.9 Medium
Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session
- penpot
- Broken access control
- CVSS 5.4 Medium
Penpot: Stored XSS via Unsanitised SVG Uploads
- penpot
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Penpot: Anonymous share-link token disclosure & page-scope bypass via get-view-only-bundle
- penpot
- Broken access control
- CVSS 5.4 Medium
Penpot: IDOR in Share-Link Deletion Allows Any File Editor to Delete Share-Links They Did Not Create
- penpot
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
- penpot
- Command injection
- CVSS 5.9 Medium
Penpot: Server-side session not invalidated on logout; stale auth-token cookie remains valid for full profile access
- penpot
- Authentication bypass
- CVSS 6.0 Medium
Penpot: SSRF guard bypass via IPv6 transition addresses (NAT64/6to4/Teredo) in webhook delivery and media download
- penpot
- Server-side request forgery (SSRF)
- CVSS 6.7 Medium
Penpot: Team admin can escalate to owner via team invitation (missing owner-role guard on the invitation path)
- penpot
- Privilege escalation
- CVSS 4.9 Medium
Penpot: A team admin (non-owner) can remove the team owner via ::delete-team-member — missing owner-protection
- penpot
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Penpot: Repeated chunk index causes temporary-storage amplification
- penpot
- Denial of service
- CVSS 4.3 Medium
Penpot: Share-link page-scope escape — comment RPCs leak comment content, author identity, and all page-ids for pages outside the share scope
- penpot
- Information disclosure
- Broken access control
- CVSS 5.3 Medium
Penpot before 2.18.0 Unauthenticated WebSocket Access via MCP Bridge
- penpot
- @penpot/mcp
- CWE-1327
- CVSS 8.7 High
Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML
- penpot
- Cross-site scripting (XSS)
- CVSS 7.6 High
Penpot: Stored XSS via custom font family name injected into a @font-face style rule
- penpot
- Cross-site scripting (XSS)
- CVSS 7.5 High
CVE-2026-17613
- Penpot
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
Penpot: Pre-authenticated account takeover via team-invitation token + prepare-register-profile
- penpot
- Authentication bypass
- Broken access control
- CVSS 7.7 High
Penpot: Authenticated SSRF in remote image import via create-file-media-object-from-url
- penpot
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Penpot has Arbitrary File Read via create-font-variant RPC endpoint
- penpot
- Path traversal