---
id: CVE-2026-123498
title: Vikunja veans before 2.7.1 Prompt Injection via Project and Task Metadata
summary: >-
  Vikunja veans before 2.7.1 contains a prompt injection vulnerability that
  allows project members with write access to inject instructions by setting
  project titles or task content rendered verbatim inside the coding agent's
  authoritative…
severity: low
cvss: 3.7
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N'
cvssSource: cna
cwe:
  - CWE-1427
vendor: go-vikunja
product: vikunja
affected:
  - vikunja < 2.7.1
published: '2026-11-08'
updated: '2026-11-08'
sourceUpdated: '2026-11-08T01:37:15.623Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-123498'
references:
  - url: >-
      https://github.com/go-vikunja/vikunja/security/advisories/GHSA-cvh3-hf56-g9xm
    label: GitHub Security Advisory (GHSA-cvh3-hf56-g9xm)
  - url: >-
      https://www.vulncheck.com/advisories/vikunja-veans-before-2.7.1-prompt-injection-via-project-and-task-metadata
    label: >-
      VulnCheck Advisory: Vikunja veans before 2.7.1 Prompt Injection via
      Project and Task Metadata
tags:
  - cve.org
ingestedAt: '2026-11-08T02:43:18.707Z'
---

## Overview

Vikunja veans before 2.7.1 contains a prompt injection vulnerability that allows project members with write access to inject instructions by setting project titles or task content rendered verbatim inside the coding agent's authoritative instruction block. Attackers can craft ProjectTitle or task descriptions that the prime hook loads on SessionStart and PreCompact, causing the agent to modify the developer's checkout or run commands.

## Affected

- `vikunja < 2.7.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.