Packagist/filament/filament CVE-2026-104181: medium 5.4
Filament: Multi-factor authentication (app) management actions do not require password reauthentication
Action: Upgrade filament/filament to 4.13.3 or later.
composer require filament/filament:4.13.3composer require filament/filament:5.8.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.13.3 | - |
| 5.0.0 | 5.8.3 | - |
Fixed versions
| 4.13.3 | 5.8.3 |
Sources
- osv: GHSA-7m6h-rg42-m449
- https://github.com/filamentphp/filament/security/advisories/GHSA-7m6h-rg42-m449
- https://nvd.nist.gov/vuln/detail/CVE-2026-104181
- https://github.com/filamentphp/filament/pull/20522
- https://github.com/filamentphp/filament/commit/6d4dae6d7a94ce5aefd7ed4dc836acb0e6b71bb1
- https://github.com/filamentphp/filament
- https://github.com/filamentphp/filament/releases/tag/v4.13.3
- https://github.com/filamentphp/filament/releases/tag/v5.8.3
CVE-2026-104181 · published · modified · JSON