A vulnerability, which was classified as problematic , was found in opf openproject up to 17.3.1 . This affects an unknown function of the component Server Response Handler . Executing a manipulation can lead to authorization bypass. The identification of this vulnerability is CVE-2026-44731 . The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.