CVE-2026-77016

Name of the Vulnerable Software and Affected Versions Workeera versions prior to 1.0.6

Description Insufficient restrictions on values written to a user's candidate profile and a lack of validation of the stored file path before deletion allow users with subscriber-level privileges to perform arbitrary file deletion on the server. This issue is caused by mass assignment, a vulnerability where an application takes user-provided data and binds it to an internal object without proper filtering.

Recommendations Update to version 1.0.6 or later.