Product
Kaneo versions before 2.1.6 contain a missing authorization vulnerability (CVE-2025-71433) allowing authenticated users to bypass membership checks and perform unauthorized operations on arbitrary workspaces.