A vulnerability labeled as problematic has been found in Frappe ErpNext up to 15.120.x/16.33.x. Affected is an unknown function. Such manipulation leads to improper authorization. This vulnerability is listed as CVE-2026-108374. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.
Vulnerability
CVE-2026-108374
VulDB
Apply vendor security patch