VULNERABILITY INTELLIGENCE

CVE-2026-53761

EPSS probability0.60%
CISA KEVNot currently listed
Published2026-09-04
Last modified2026-09-09

Description

Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication bypass vulnerability via logged invitation keys in crm/api. This issue has been patched in version 1.73.0.

Weakness classification

  • security-advisories@github.com: CWE-287

Primary references