CVE-2026-44976

Vulnerability Description

Frappe is a full-stack web application framework. Prior to version 16.17.4, any user can modify any field in any Onboarding Step record. This issue has been patched in version 16.17.4.

Related Weaknesses (CWE)

CWE-284

References

https://github.com/frappe/frappe/security/advisories/GHSA-78rj-jch8-42m8

FAQ

What is CVE-2026-44976?

CVE-2026-44976 is a documented vulnerability. Frappe is a full-stack web application framework. Prior to version 16.17.4, any user can modify any field in any Onboarding Step record. This issue has been patched in version 16.17.4.

How severe is CVE-2026-44976?

CVSS scoring is not yet available for CVE-2026-44976. Check NVD for updates.

Is there a patch for CVE-2026-44976?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.