THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-59712 (HIGH 8.1) — Leantime's Users::getUser method in the JSON-RPC API lacks proper authorization checks, allowing authenticated users to retrieve full user credential rows including password hashes, TOTP secrets, and session tokens. Attackers can exploit this by calling users.getUser with arbitra

[NVD] CVE-2026-59712 (HIGH 8.1) — Leantime's Users::getUser method in the JSON-RPC API lacks proper authorization checks, allowing authenticated users to retrieve full user credential rows including password hashes, TOTP secrets, and session tokens. Attackers can exploit this by calling users.getUser with arbitra

lownvdPublished 2026-07-06

CVE-2026-59712 CVSS: 8.1 HIGH Published: 2026-07-06T21:16:58.793

Leantime's Users::getUser method in the JSON-RPC API lacks proper authorization checks, allowing authenticated users to retrieve full user credential rows including password hashes, TOTP secrets, and session tokens. Attackers can exploit this by calling users.getUser with arbitrary user IDs to enumerate all accounts and obtain crede

MITRE ATT&CK techniques

Password CrackingT1110.002
CredentialsT1589.001

Indicators of compromise

CVE-2026-59712cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-59712