CVE-2026-42613
1 advisory.
Packagist/getgrav/grav CVE-2026-42613: critical 9.4
Grav Vulnerable to Privilege Escalation via Missing Server-Side Validation of groups/access
Action: Upgrade getgrav/grav to 2.0.0-beta.2 or later.
composer require getgrav/grav:2.0.0-beta.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0-beta.2 | - |
Fixed versions
| 2.0.0-beta.2 |
Sources
- osv: GHSA-pxm6-mhxr-q4mj
- https://github.com/getgrav/grav/security/advisories/GHSA-pxm6-mhxr-q4mj
- https://github.com/getgrav/grav/security/advisories/GHSA-w48r-jppp-rcfw
- https://nvd.nist.gov/vuln/detail/CVE-2026-42613
- https://github.com/getgrav/grav-plugin-login/commit/3d419a0dabd70aed1fd49afcd5919004a4141da1
- https://github.com/getgrav/grav
CVE-2026-42613 · published · modified · JSON