CVE-2026-53761: Frappe CRM

High severity, CVSS 8.2. EPSS: 0.6% chance of exploitation in the next 30 days.

Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication bypass vulnerability via logged invitation keys in crm/api. This issue has been patched in version 1.73.0.

Affected products

• Frappe CRM: before 1.73.0 (fixed in 1.73.0)

Published 2026-09-04. Last modified 2026-09-09.