CVE-2026-80201Disclosure

LOWCVSS 2.0 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call getApiToken() and getPlainApiToken() methods. Attackers with template creation permissions can embed these method calls in invoice templates to leak hashed API tokens in rendered invoice output.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud46d
Disclosure
🚨*CVE* CVE-2026-80201 Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call getApiToken() and getPlainApiToken() methods. … https://www.cve.org/CVERecord?id=CVE-2026-80201 ----- Traducción: CVE-2026-80201 Kim… https://infoflow.cloud`
Post summary
This tweet announces that Kimai versions prior to 2.53.0 contain a sandbox bypass allowing admin users to retrieve API tokens through exposed User methods.
0000037
102 followersView on X
CVE@CVEnew46d
General
CVE-2026-80201 Kimai before 2.53.0 fails to block sensitive User methods in the Twig invoice template sandbox, allowing admins to call getApiToken() and getPlainApiToken() methods. … https://www.cve.org/CVERecord?id=CVE-2026-80201
Post summary
The post notes a sandbox bypass vulnerability in Kimai that could expose API tokens via the Twig invoice template, but it does not provide a PoC, exploit, or mitigation.
000001.1K
58.0K followersView on X

Explore more

Back to dashboard