CVE-2026-65055 describes a missing authorization vulnerability in Taiga 6.10.1's backend component (taiga-back). The issue allows unauthenticated attackers to disclose sensitive information about private projects by querying the filters_data API endpoints for UserStory, Task, Issue, and Epic viewsets with sequential project IDs. This results in leakage of the full member roster and internal workflow configuration, including user IDs, full names, and gravatar hashes. The vulnerability bypasses the intended access controls that restrict other project API endpoints. There is no vendor advisory or patch information available at this time.

An attacker can obtain sensitive membership and workflow configuration details of any private project without authentication. This information disclosure could aid in further targeted attacks or reconnaissance against the affected organization. However, the vulnerability does not allow modification or deletion of data, nor does it provide direct access to project content beyond membership and workflow metadata.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected API endpoints if possible or monitor for unusual unauthenticated requests targeting filters_data endpoints. No official fix or workaround has been published by the vendor at this time.