---
id: CVE-2026-65055
title: >-
  Taiga taiga-back Private Project Member Roster Disclosure via Unauthenticated
  filters_data Endpoints
summary: >-
  Taiga 6.10.1 contains a missing authorization vulnerability that allows
  unauthenticated attackers to disclose the full member roster and internal
  workflow configuration of any private project by supplying a project ID to the
  filters_data…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-862
vendor: Taiga
product: taiga-back
affected:
  - taiga-back (all versions)
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-07-23T14:11:19.643713Z'
exploitAvailable: true
published: '2026-07-21'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T14:18:12.153Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-65055'
references:
  - url: 'https://github.com/taigaio/taiga-back/issues/246'
    label: GitHub Issue
  - url: 'https://github.com/taigaio/taiga-back'
    label: Product
  - url: >-
      https://www.vulncheck.com/advisories/taiga-taiga-back-private-project-member-roster-disclosure-via-unauthenticated-filters-data-endpoints
tags:
  - cve.org
  - exploit-available
epss: 0.00431
epssPercentile: 0.36871
ingestedAt: '2026-09-24T15:45:56.722Z'
---

## Overview

Taiga 6.10.1 contains a missing authorization vulnerability that allows unauthenticated attackers to disclose the full member roster and internal workflow configuration of any private project by supplying a project ID to the filters_data API endpoints on UserStory, Task, Issue, and Epic viewsets. Attackers can send unauthenticated GET requests to the filters_data endpoints with sequential integer project IDs to enumerate private project membership details including user IDs, full names, and gravatar hashes, bypassing the access controls that correctly restrict other project API endpoints.

## Affected

- `taiga-back (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.