[HIGH] Grav CMS vulnerable to remote code execution via .zip file upload

PKSA-b2c2-gv41-gcc7 CVE-2026-72819 GHSA-r94f-hx44-8jqf

Affected version: <2.0.13

Reported by:
GitHub

[HIGH] Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin

PKSA-dzhx-7r7k-p6cx CVE-2026-75837 GHSA-xhfv-7758-r9hx

Affected version: <2.0.14

Reported by:
GitHub

[MEDIUM] Grav: Single invalid UTF-8 byte disables every rule in Security::detectXss(), bypassing the page-content XSS safety gate

PKSA-ht1d-wm6t-8sdj CVE-2026-75834 GHSA-q2j8-x8hf-63ch

Affected version: <2.0.14

Reported by:
GitHub

[CRITICAL] Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write

PKSA-nc3c-xf26-g5gp CVE-2026-75827 GHSA-f8wv-xp27-6gq7

Affected version: <=2.0.14

Reported by:
GitHub

[CRITICAL] Grav: detectXss() misses an event-handler attribute after an unpaired quote in an unquoted attribute value, giving stored XSS

PKSA-tr1n-vmpf-rmt6 CVE-2026-75828 GHSA-vfmf-q6x9-cw96

Affected version: <=2.0.14

Reported by:
GitHub

[HIGH] Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in `plugin-asset-map.php` Static Asset Server (`index.php`)

PKSA-t3gq-ss3y-p7b7 CVE-2026-74907 GHSA-4v9q-p283-qc2m

Affected version: <=2.0.14

Reported by:
GitHub

[HIGH] Grav: Path Traversal in MediaUploadTrait::deleteFile() Allows Arbitrary File Deletion

PKSA-275t-x9d8-k5s3 CVE-2026-72695 GHSA-jq29-c7v8-rg55

Affected version: <=2.0.15

Reported by:
GitHub

[HIGH] Grav: media_directory() Twig function allows filesystem path traversal and file content disclosure from sandboxed page content

PKSA-9871-4yy4-mgt8 CVE-2026-72697 GHSA-47ch-6w46-6xm7

Affected version: <=2.0.15

Reported by:
GitHub

[HIGH] Grav: UserInterface offsetget/offsetexists allow-listed in Twig sandbox let editor-authored content leak hashed_password and 2FA secrets via offsetGet()

PKSA-f7gk-wxm8-5j49 CVE-2026-76839 GHSA-3jhr-mxmx-38cx

Affected version: <=2.0.15

Reported by:
GitHub

[HIGH] Grav: config_denied_paths default list omits `system`, exposing real secrets (e.g. system.cache.redis.password) via the Twig sandbox when config_access is enabled

PKSA-rk3g-1sfp-78gs CVE-2026-76846 GHSA-xjw5-q542-3vmr

Affected version: <=2.0.15

Reported by:
GitHub

[HIGH] Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by config_denied_paths

PKSA-wz98-fgrh-3wq2 CVE-2026-72698 GHSA-p597-crqc-m349

Affected version: <2.0.16

Reported by:
GitHub

[LOW] Grav: Non constant time nonce comparison in Utils::verifyNonce() used for CSRF protection

PKSA-xzd7-91fp-yh97 CVE-2026-72701 GHSA-38p6-h87p-r4cg

Affected version: <=2.0.15

Reported by:
GitHub

[LOW] Grav: Origin validation bypass in Uri::referrer() and Pages::referrerRoute() via unanchored prefix match

PKSA-ms14-tz6x-6sqm CVE-2026-72702 GHSA-9ccq-2jfg-qw33

Affected version: <=2.0.15

Reported by:
GitHub

[MEDIUM] Grav: Stored XSS via Markdown audio/video media <source> URL

PKSA-12j4-4z12-p48k CVE-2026-75831 GHSA-6qw9-4vv5-jr97

Affected version: <=2.0.14

Reported by:
GitHub

[MEDIUM] Grav: Stored XSS via quoted-attribute bypass in detectXss

PKSA-rstv-2c4g-sjjn CVE-2026-72832 GHSA-269c-h76q-8cxw

Affected version: >=1.5.2,<=2.0.12

Reported by:
GitHub

[HIGH] Grav: FlexDirectory::dynamicDataField() executes arbitrary callables from blueprint data with no validation

PKSA-7hs4-c5nt-m1jh CVE-2026-65608 GHSA-c4wf-2xxc-68qm

Affected version: >=1.7.0,<2.0.9

Reported by:
GitHub

[MEDIUM] Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()

PKSA-4j1y-b223-8d57 CVE-2026-59193 GHSA-2vcx-h8p2-9pg9

Affected version: >=1.0.0,<2.0.0

Reported by:
GitHub

[HIGH] Grav: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge

PKSA-p6yn-thc9-dbs3 CVE-2026-62669 GHSA-7mgc-c7pq-3rr3

Affected version: <2.0.4

Reported by:
GitHub

[MEDIUM] Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)

PKSA-sq15-xbtt-m678 CVE-2026-61842 GHSA-mc5q-6hpj-rp7j

Affected version: <2.0.2

Reported by:
GitHub

[MEDIUM] Grav: Decompression Bomb via ZipArchiver - Missing Extraction Limits

PKSA-2vrn-cxz9-yg23 CVE-2026-61690 GHSA-928x-9mpw-8h56

Affected version: <2.0.1

Reported by:
GitHub

[HIGH] Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()

PKSA-1q9r-bgms-91mf CVE-2026-64850 GHSA-fj2p-qj2f-74v5

Affected version: <2.0.7

Reported by:
GitHub

[MEDIUM] Grav: Authenticated ReDoS via regex_replace in Twig Sandbox

PKSA-wwkm-grbv-93ck CVE-2026-62672 GHSA-37f3-6p89-6qr9

Affected version: <2.0.4

Reported by:
GitHub

[MEDIUM] Grav: Page editors can inject arbitrary script into rendered pages via the Twig sandbox's assets.addJs/addCss allowlist, escalating to super-admin

PKSA-rjzr-vkvg-cvmf GHSA-8hgv-xc77-jmcr

Affected version: <=2.0.19

Reported by:
GitHub

[HIGH] Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems

PKSA-wh99-p4gt-7bkp CVE-2026-62673 GHSA-vwg3-w8w3-pc79

Affected version: <2.0.4

Reported by:
GitHub

[MEDIUM] Grav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTrait::style() — incomplete patch of GHSA-r7fx-8g49-7hhr

PKSA-p98m-jfx1-qxw4 CVE-2026-55890 GHSA-pmf8-g7c8-7v54

Affected version: <=2.0.0-rc.8

Reported by:
GitHub

[HIGH] Grav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray()

PKSA-jw9z-qj9h-1drk CVE-2026-44738 GHSA-j274-39qw-32c9

Affected version: <=2.0.0-rc.1

Reported by:
GitHub

[HIGH] Low-privileged Grav API users can create super-admin accounts via blueprint-upload

PKSA-jtpz-17pm-t9v9 CVE-2026-42844 GHSA-6xx2-m8wv-756h

Affected version: <2.0.0-beta.4

Reported by:
GitHub

[HIGH] Grav is Vulnerable to Stored XSS via Tag Injection

PKSA-sd9s-hpbv-6d8f CVE-2026-42611 GHSA-w8cg-7jcj-4vv2

Affected version: <2.0.0-beta.2

Reported by:
GitHub

[MEDIUM] Grav is Vulnerable to XXE via SVG Upload

PKSA-59xg-9744-g5wz CVE-2026-56701 GHSA-3446-6mgw-f79p

Affected version: <2.0.0-beta.2

Reported by:
GitHub

[HIGH] Grav has Unauthenticated Path Traversal & Arbitrary File Write in its FormFlash component

PKSA-ncnf-tf1t-zhtj CVE-2026-42608 GHSA-hmcx-ch82-3fv2

Affected version: <2.0.0-beta.2

Reported by:
GitHub

[HIGH] Grav Vulnerable to Administrative Account Disruption and Privilege De-escalation via User Overwrite Logic

PKSA-fchw-jdvj-kg96 CVE-2026-42609 GHSA-rr73-568v-28f8

Affected version: <2.0.0-beta.2

Reported by:
GitHub

[LOW] Grav has Insecure Deserialization in File Cache

PKSA-t2z1-v63n-9cpk CVE-2026-7317 GHSA-gwfr-jfjf-92vv

Affected version: <2.0.0-beta.2

Reported by:
GitHub

[CRITICAL] Grav has multiple RCE vectors: unsafe unserialize (x3), command injection in git clone, SSTI blocklist bypass

PKSA-vnvp-8nvk-g8ck GHSA-vj3m-2g9h-vm4p

Affected version: <2.0.0-beta.2

Reported by:
GitHub

[HIGH] Grav Vulnerable to Publisher-Level Stored XSS via Unquoted Event Attributes

PKSA-dxs6-j3rv-n16d CVE-2026-42612 GHSA-9695-8fr9-hw5q

Affected version: <2.0.0-beta.2

Reported by:
GitHub

[MEDIUM] Grav Vulnerable to Sensitive Information Disclosure via Accounts Service Bypass

PKSA-69wb-mt3g-24xp CVE-2026-42610 GHSA-3f29-pqwf-v4j4

Affected version: <2.0.0-beta.2

Reported by:
GitHub

[CRITICAL] Grav Vulnerable to Privilege Escalation via Missing Server-Side Validation of groups/access

PKSA-pzhx-ftqg-8fxh CVE-2026-42613 GHSA-pxm6-mhxr-q4mj

Affected version: <2.0.0-beta.2

Reported by:
GitHub

[MEDIUM] Grav Vulnerable to XSS via Taxonomy Field Values in Admin Panel

PKSA-ddbz-4vx4-q29g CVE-2026-42842 GHSA-c2q3-p4jr-c55f

Affected version: <2.0.0-beta.2

Reported by:
GitHub

[MEDIUM] Grav CMS vulnerable to stored XSS via Markdown media attribute() action

PKSA-yx72-zyj1-gtxy CVE-2026-42841 GHSA-r7fx-8g49-7hhr

Affected version: <2.0.0-beta.2

Reported by:
GitHub

[CRITICAL] Grav Vulnerable to Remote Code Execution (RCE) via Malicious Plugin ZIP Upload in Direct Install Feature

PKSA-st6r-p3js-kbk7 CVE-2026-42607 GHSA-w48r-jppp-rcfw

Affected version: <2.0.0-beta.2

Reported by:
GitHub

[HIGH] Grav is vulnerable to Server-Side Template Injection (SSTI) via Forms

PKSA-b17c-1fcn-dgtx CVE-2025-66298 GHSA-8535-hvm8-2hmv

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[HIGH] Grav is vulnerable to RCE via SSTI through Twig Sandbox Bypass

PKSA-cyrn-zc8g-f5mw CVE-2025-66294 GHSA-662m-56v4-3r8f

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[MEDIUM] Grav vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/pages/[page]` parameter `data[header][template]` in Advanced Tab

PKSA-6ybw-qvkx-41s3 CVE-2025-66310 GHSA-7g78-5g5g-mvfj

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[MEDIUM] Grav is vulnerable to Cross-Site Scripting (XSS) Reflected endpoint /admin/pages/[page], parameter data[header][content][items], located in the "Blog Config" tab

PKSA-fhbw-8kkc-q4g7 CVE-2025-66309 GHSA-65mj-f7p4-wggq

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[HIGH] Grav vulnerable to Privilege Escalation and Authenticated Remote Code Execution via Twig Injection

PKSA-69s1-6gdk-gbrs CVE-2025-66297 GHSA-858q-77wx-hhx6

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[MEDIUM] Grav Admin Plugin vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/config/site` parameter `data[taxonomies]`

PKSA-j9sn-rww3-fk26 CVE-2025-66308 GHSA-gqxx-248x-g29f

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[HIGH] Grav vulnerable to Path traversal / arbitrary YAML write via user creation leading to Account Takeover / System Corruption

PKSA-87p7-31n6-n4f3 CVE-2025-66295 GHSA-h756-wh59-hhjv

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[HIGH] Grav vulnerable to Denial of Service via Improper Input Handling in 'Supported' Parameter

PKSA-nbf5-vjfz-hnnq CVE-2025-66305 GHSA-m8vh-v6r6-w7p6

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[MEDIUM] Grav vulnerable to Information Disclosure via IDOR in Grav Admin Panel

PKSA-rdds-1cns-2prg CVE-2025-66306 GHSA-4cwq-j7jv-qmwg

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[MEDIUM] Grav vulnerable to Path Traversal allowing server files backup

PKSA-pps4-ft6r-rq3g CVE-2025-66302 GHSA-j422-qmxp-hv94

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[MEDIUM] Grav Admin Plugin vulnerable to User Enumeration & Email Disclosure

PKSA-kdts-d57h-cyfm CVE-2025-66307 GHSA-q3qx-cp62-f6m7

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[MEDIUM] Grav Admin Plugin is vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/accounts/groups/[group]` parameter `data[readableName]`

PKSA-w4p2-x7q2-ymxv CVE-2025-66312 GHSA-rmw5-f87r-w988

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[MEDIUM] Grav vulnerable to Cross-Site Scripting (XSS) Stored endpoint `/admin/pages/[page]` in Multiples parameters

PKSA-mhn3-t14t-g84c CVE-2025-66311 GHSA-mpjj-4688-3fxg

Affected version: <1.11.0-beta.1

Reported by:
GitHub

[MEDIUM] Grav Exposes Password Hashes Leading to privilege escalation

PKSA-gsfs-x94c-47x5 CVE-2025-66304 GHSA-gq3g-666w-7h85

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[MEDIUM] Grav is vulnerable to a DOS on the admin panel

PKSA-v47z-3557-jjwp CVE-2025-66303 GHSA-x62q-p736-3997

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[HIGH] Grav has Broken Access Control which allows an Editor to modify the page's YAML Frontmatter to alter form processing actions

PKSA-8gyx-1dyf-y75r CVE-2025-66301 GHSA-v8x2-fjv7-8hjh

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[HIGH] Grav is vulnerable to Arbitrary File Read

PKSA-82ft-1nmh-cs67 CVE-2025-66300 GHSA-p4ww-mcp9-j6f2

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[HIGH] Grav is Vulnerable to Security Sandbox Bypass with SSTI (Server Side Template Injection)

PKSA-83gv-619f-b6h7 CVE-2025-66299 GHSA-gjc5-8cfh-653x

Affected version: <1.8.0-beta.27

Reported by:
GitHub

[HIGH] Grav vulnerable to Privilege Escalation in Grav Admin: Missing Username Uniqueness Check Allows Admin Account Takeover

PKSA-h4jv-pmqx-9phz CVE-2025-66296 GHSA-cjcp-qxvg-4rjm

Affected version: <1.8.0-beta.27

Reported by:
GitHub