Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-53761

Frappe CRM: Authentication Bypass via Logged Invitation Keys in crm/api

Description

Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication bypass vulnerability via logged invitation keys in crm/api. This issue has been patched in version 1.73.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

frappe crm

  • < 1.73.0affected

References