Leantime versions before 3.9.6 have an authorization bypass vulnerability in the HTMX plugin install endpoint. This flaw allows authenticated users with limited roles to install marketplace plugins without proper permission validation. Attackers can manipulate plugin properties such as identifier, version, and license key to deploy malicious plugins.