# Penpot vulnerabilities Source: https://junglewise.ai/threats/technologies/penpot Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/penpot.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 17 vulnerabilities in Penpot: 0 in the last 7 days and 15 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-105696, was published on 5 October 2026. Nothing in the last four weeks, down from 13 vulnerabilities in the four before. 0 critical against 1. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 15 - All time: 17 (2 critical, 0 exploited in the wild) ## About Penpot A design and prototyping platform for teams that allows for real-time collaboration using open web standards. ## Latest Penpot vulnerabilities - [CVE-2026-105696: Penpot authorization bypass in get-page RPC](https://junglewise.ai/threats/cve-2026-105696-penpot-is-an-open-source-design-and-prototyping-platform-prior) (medium, CVSS 6.5, published 5 Oct 2026) - [CVE-2026-105695: Penpot authorization bypass in upload chunk assembly](https://junglewise.ai/threats/cve-2026-105695-penpot-is-an-open-source-design-and-prototyping-platform-prior) (medium, CVSS 5.9, published 5 Oct 2026) - [CVE-2026-105694: Penpot stored XSS via unsanitized SVG upload](https://junglewise.ai/threats/cve-2026-105694-penpot-is-an-open-source-design-and-prototyping-platform-prior) (medium, CVSS 5.4, published 5 Oct 2026) - [CVE-2026-105693: Penpot authentication bypass in get-view-only-bundle RPC](https://junglewise.ai/threats/cve-2026-105693-penpot-is-an-open-source-design-and-prototyping-platform-prior) (medium, CVSS 5.3, published 5 Oct 2026) - [CVE-2026-105692: Penpot insecure direct object reference in share-link deletion](https://junglewise.ai/threats/cve-2026-105692-penpot-is-an-open-source-design-and-prototyping-platform-prior) (medium, CVSS 5.4, published 5 Oct 2026) - [CVE-2026-105691: Penpot SVG exporter command injection via fill color](https://junglewise.ai/threats/cve-2026-105691-penpot-is-an-open-source-design-and-prototyping-platform-prior) (critical, CVSS 9.9, published 5 Oct 2026) - [CVE-2026-105690: Penpot session token replay via logout bypass](https://junglewise.ai/threats/cve-2026-105690-penpot-is-an-open-source-design-and-prototyping-platform-prior) (medium, CVSS 5.9, published 5 Oct 2026) - [CVE-2026-105689: Penpot SSRF bypass via IPv6 transition addresses](https://junglewise.ai/threats/cve-2026-105689-penpot-is-an-open-source-design-and-prototyping-platform-prior) (info, published 5 Oct 2026) - [CVE-2026-105688: Penpot privilege escalation in team invitations](https://junglewise.ai/threats/cve-2026-105688-penpot-is-an-open-source-design-and-prototyping-platform-prior) (medium, CVSS 6.7, published 5 Oct 2026) - [CVE-2026-105687: Penpot delete-team-member privilege escalation in RPC](https://junglewise.ai/threats/cve-2026-105687-penpot-is-an-open-source-design-and-prototyping-platform-prior) (medium, CVSS 4.9, published 5 Oct 2026) - [CVE-2026-105686: Penpot chunked media upload storage amplification](https://junglewise.ai/threats/cve-2026-105686-penpot-is-an-open-source-design-and-prototyping-platform-prior) (info, published 5 Oct 2026) - [CVE-2026-105684: Penpot information disclosure in RPC comment queries](https://junglewise.ai/threats/cve-2026-105684-penpot-is-an-open-source-design-and-prototyping-platform-prior) (medium, CVSS 4.3, published 5 Oct 2026) - [CVE-2026-100868: Penpot MCP server plugin WebSocket authentication bypass](https://junglewise.ai/threats/cve-2026-100868-penpot-before-2-18-0-binds-the-mcp-server-plugin-websocket) (medium, CVSS 6.3, published 27 Sep 2026) - [CVE-2026-47666: Penpot stored cross-site scripting in custom font family names](https://junglewise.ai/threats/cve-2026-47666-penpot-stored-cross-site-scripting-in-custom-font-family-names) (high, CVSS 7.6, published 26 Aug 2026) - [CVE-2026-47665: Penpot stored cross-site scripting in file comments](https://junglewise.ai/threats/cve-2026-47665-penpot-stored-cross-site-scripting-in-file-comments) (high, CVSS 8.7, published 26 Aug 2026) - [CVE-2026-45806: Penpot SSRF in remote image import](https://junglewise.ai/threats/cve-2026-45806-penpot-ssrf-in-remote-image-import) (high, CVSS 7.7, published 15 Jul 2026) - [CVE-2026-44986: Penpot account takeover via invitation token leakage and registration bypass](https://junglewise.ai/threats/cve-2026-44986-penpot-account-takeover-via-invitation-token-leakage-and) (critical, CVSS 9.9, published 15 Jul 2026) ## Most severe Penpot vulnerabilities - [CVE-2026-105691: Penpot SVG exporter command injection via fill color](https://junglewise.ai/threats/cve-2026-105691-penpot-is-an-open-source-design-and-prototyping-platform-prior) (critical, CVSS 9.9, published 5 Oct 2026) - [CVE-2026-44986: Penpot account takeover via invitation token leakage and registration bypass](https://junglewise.ai/threats/cve-2026-44986-penpot-account-takeover-via-invitation-token-leakage-and) (critical, CVSS 9.9, published 15 Jul 2026) - [CVE-2026-47665: Penpot stored cross-site scripting in file comments](https://junglewise.ai/threats/cve-2026-47665-penpot-stored-cross-site-scripting-in-file-comments) (high, CVSS 8.7, published 26 Aug 2026) - [CVE-2026-45806: Penpot SSRF in remote image import](https://junglewise.ai/threats/cve-2026-45806-penpot-ssrf-in-remote-image-import) (high, CVSS 7.7, published 15 Jul 2026) - [CVE-2026-47666: Penpot stored cross-site scripting in custom font family names](https://junglewise.ai/threats/cve-2026-47666-penpot-stored-cross-site-scripting-in-custom-font-family-names) (high, CVSS 7.6, published 26 Aug 2026) - [CVE-2026-105688: Penpot privilege escalation in team invitations](https://junglewise.ai/threats/cve-2026-105688-penpot-is-an-open-source-design-and-prototyping-platform-prior) (medium, CVSS 6.7, published 5 Oct 2026) - [CVE-2026-105696: Penpot authorization bypass in get-page RPC](https://junglewise.ai/threats/cve-2026-105696-penpot-is-an-open-source-design-and-prototyping-platform-prior) (medium, CVSS 6.5, published 5 Oct 2026) - [CVE-2026-100868: Penpot MCP server plugin WebSocket authentication bypass](https://junglewise.ai/threats/cve-2026-100868-penpot-before-2-18-0-binds-the-mcp-server-plugin-websocket) (medium, CVSS 6.3, published 27 Sep 2026) - [CVE-2026-105695: Penpot authorization bypass in upload chunk assembly](https://junglewise.ai/threats/cve-2026-105695-penpot-is-an-open-source-design-and-prototyping-platform-prior) (medium, CVSS 5.9, published 5 Oct 2026) - [CVE-2026-105690: Penpot session token replay via logout bypass](https://junglewise.ai/threats/cve-2026-105690-penpot-is-an-open-source-design-and-prototyping-platform-prior) (medium, CVSS 5.9, published 5 Oct 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 13 vulnerabilities in the four before. 0 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 2 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 1 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 12 | 1 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Penpot technologies - [Penpot Mcp](https://junglewise.ai/threats/technologies/mcp): 11 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Penpot vulnerabilities", https://junglewise.ai/threats/technologies/penpot, 9 November 2026.