Taiga Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in the Taiga API, present in versions through 6.8.3. This issue arises from unsafe deserialization of untrusted data, allowing for unauthorized code execution.

Impact

Exploitation of this vulnerability allows for authenticated remote code execution on the server where Taiga is hosted.

Remediation

Users can upgrade to Taiga version 6.9.0 to address this vulnerability.

Added: Oct 28, 2025, 9:22 PM
Updated: Oct 28, 2025, 9:22 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
5.0
remediation
7.7
relevance
0.8
threat
1.3
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.