shouldiuse.io

Report

Should I Use Leantime?

leantime.io·Analyzed 1 day ago··Based on 14 sources

Leantime: Free, open-source project management software designed for ADHD, ADD, and all brains, streamlining tasks, boosting productivity & collaboration.

Depends

Depends

A good buy for small teams, non-profits, and self-hosters who want free, structured project management.

Free self-hosted PM for small, ADHD-friendly teams — but a CVE streak and tiny vendor make it risky for anything sensitive.

Confidence: Medium

4.7/5

G2 rating

235 reviews; other sources cite 4.5

$5/user/mo

Starting price

cloud; listings vary to $12.49

Yes

Free tier

open source, self-hosted

25,500+

Installations

company estimate, 2024

Value for money5

Free self-hosting; cheap cloud tiers

Ease of use4

Built for non-project managers; older bug gripes

Feature depth3

Solid core; extras gated behind plugins

Support quality2

No demo; opaque plugin pricing

Security posture2

Repeated auth bypass and access-control CVEs

Pros

  • Free, open source; self-host with no license costs²
  • Designed for non-project managers and ADHD/ADD brains¹
  • 4.7/5 G2 rating across ~235 reviews⁴
  • Users praise the idea-to-action workflow³
  • Estimated 25,500+ installations11

Cons

  • Some self-hosters reported it 'quite buggy'⁶
  • No demo; plugin pricing hard to find⁵
  • Multiple 2025–2026 CVEs, including authentication bypass⁸
  • Tiny vendor (~$120K raised); limited support depth12
  • Polarized feedback: G2 fans vs skeptical self-hosters⁷

Gotchas

  • highSelf-hosted updates are not automatic; outdated installs stay exposed to known CVEs.10
  • mediumNo demo before buying; plugin prices buried on the site.⁵
  • lowPricing listings conflict ($5 vs $12.49/user/mo) — confirm current rates before signup.⁴
  • lowManaged hosting is sold separately; DIY self-hosting burdens are entirely yours.

Best for

  • Small self-hosting teams
  • Non-profits
  • ADHD/ADD users wanting structure
  • Startups replacing ClickUp or Asana cheaply

Not for

  • Enterprises needing compliance-grade security
  • Teams wanting vendor-managed updates and support
  • Buyers who need a demo before purchase
  • Large orgs with complex PMO processes

Pricing

Self-hosted (open source)

Free

  • Full open-source system
  • You host, maintain, and patch

Cloud plans

$5–$12.49/user/mo depending on source

  • Hosted by Leantime
  • Annual billing ~$8/user/mo per one listing

Security

Multiple CVEs in 2025–2026, including authentication bypass, broken access control, and XSS — patch fast if self-hosting.

  • CVE-2026-54418: Authentication bypassAuthentication bypass vulnerability disclosed August 2026.⁸
  • Privilege escalation in Leantime ≤3.8.0Broken access control (CWE-862) lets low-privilege users escalate to owner.
  • CVE-2025-28254: XSSCross-site scripting vulnerability in v3.2.1 and before, authenticated users.⁹
  • CVE-2026-59713: OIDC login CSRFCSRF vulnerability in OIDC login verification flow, July 2026.

What users say

G2 raters like the idea-to-action flow (4.7/5), while some r/selfhosted users found it buggy and the site unhelpful.

“I love how LeanTime works to help move you from ideas to actions”
— G2 review
“I really wanted to like Leantime, and I do like the look and feel, but it'”
— Reddit, r/selfhosted
“Overall Leantime seems quite buggy still, it's a shame really because a”
— Reddit, r/selfhosted

Alternatives

Compare Leantime with each alternative.

OpenProject

Larger open-source suite marketed directly as a Leantime alternative.

ClickUp

Polished commercial PM; top-named Leantime alternative on G2.

Redmine

Bare-bones self-hosted tracker r/selfhosted compares it against.

Full analysis

Based on 40+ public sources; some review snippets truncated, and pricing listings conflict.

Sources

  1. Leantime official siteleantime.io
    official
  2. Leantime on GitHubgithub.com
    official
  3. Leantime G2 reviewsg2.com
    review
  4. Leantime on SaaSworthy/SpotSaaSspotsaas.com
    review
  5. Reddit: Leantime vs Redmine opinionsreddit.com
    review
  6. Reddit: Leantime v2.4 release threadreddit.com
    review
  7. Reddit: Leantime alternative threadreddit.com
    review
  8. CVE-2026-54418 auth bypasssentinelone.com
    security
  9. CVE-2025-28254 XSS detailnvd.nist.gov
    security
  10. TurnKey GNU/Linux update warningturnkeylinux.org
    security
  11. SiliconAngle: 25,500 installationssiliconangle.com
    news
  12. Leantime funding profilestartupintros.com
    news
  13. Leantime pricing breakdownfindpmsoftware.com
    review
  14. OpenProject Leantime alternative pageopenproject.org
    official

Rate this review

Anonymous. You can change your vote.

Loading votes…

Ask a follow-up

Ask if a use case fits. Answers stay inside this report and its sources.

    Comments

    One queue. No replies. Give a display name first. Limit: 7 comments per day.

    Save a name to write a comment.

    No comments yet.