CVE-2026-85292

Name of the Vulnerable Software and Affected Versions InvoicePlane versions prior to 1.7.2

Description The User Controller uses PHP's loose inequality operator to compare the session user type value with the required role. In environments using non-standard session backends that return unexpected scalar types, type juggling—a mechanism where PHP converts a variable from one data type to another—can allow a value that does not strictly match the required role to pass the authorization check. This may lead to authentication or authorization bypass.

Recommendations Update to version 1.7.2.