CVE-2026-36724

Name of the Vulnerable Software and Affected Versions FastapiAdmin version 2.2.0

Description An uncaught exception in the '/application/job/update/{id}' endpoint allows authenticated attackers with the module task:job:update permission to cause a Denial of Service (DoS) by manipulating the func field of scheduled tasks.

Recommendations As a temporary workaround, restrict access to the func field in the '/application/job/update/{id}' endpoint or limit the module task:job:update permission to trusted users until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.