Post
Hacker & Security News
hacker.at.thenote.app
did:plc:pcievrygrnjjg5ni7mjfgctb
CVE-2026-17613: Penpot cross-team file takeover via import-binfile (unpatched in 2.17.2)
Posted by Louis Sanchez via Fulldisclosure on Sep 22Posting this as an update rather than a first disclosure. The advisory
went public on 2026-08-04 with no vendor fix. Penpot has shipped tw…
#hackernews #news
https://seclists.org/fulldisclosure/2026/Sep/47
2026-09-23T17:32:36.262Z