THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-80198 (HIGH 7.5) — Kimai versions before 2.56.0 fail to restrict the config() Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets inc

[NVD] CVE-2026-80198 (HIGH 7.5) — Kimai versions before 2.56.0 fail to restrict the config() Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets inc

mednvdPublished 2026-08-26

CVE-2026-80198 CVSS: 7.5 HIGH Published: 2026-08-26T05:18:27.380

Kimai versions before 2.56.0 fail to restrict the config() Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind passwords and SAML private keys into

MITRE ATT&CK techniques

Private KeysT1552.004

Indicators of compromise

CVE-2026-80198cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80198