appwrite has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 7.3 (high).
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.3
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-89036High· 8.8Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute arbitrary commands by injecting TAB characters into the providerRootDirectory p…49CVE-2026-72861Medium· 5.8The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition32
appwrite vulnerabilities
CVEs affecting appwrite, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-89036High· 8.8Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute arbitrary commands by injecting TAB characters into the providerRootDirectory p…
Appwrite before 2.0.0 contains an argument injection vulnerability that allows authenticated users with functions.write or sites.write permissions to execute arbitrary commands by injecting TAB characters into the providerRootDirectory p…
▾ Twilightappwrite · appwriteEPSS 0.70%via NVD
CVE-2026-72861Medium· 5.8The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition
The github-issue-bot templates in appwrite/templates verify the GitHub webhook signature with an inverted condition. verifyWebhook in node/github-issue-bot/src/github.js and in node-typescript/github-issue-bot/src/github.ts returns "type…
▾ Sunlitappwrite · templatesEPSS 0.27%via NVD