{"action":"Upgrade easycorp/easyadmin-bundle to 4.29.16 or later.","affected":[{"fixed":"4.29.16","introduced":"4.0.0"},{"fixed":"5.5.1","introduced":"5.0.0"}],"component":"easycorp/easyadmin-bundle","cve_ids":["CVE-2026-81892"],"ecosystem":"Packagist","epss":0.00448,"exploited":false,"fixed_versions":["4.29.16","5.5.1"],"ghsa_id":"GHSA-g2fm-8hr4-j82h","id":"tcs_01M5KF26BFED4PCAP30TJTJP5F","modified_at":"2026-09-02T14:45:06.582435418Z","published_at":"2026-09-02T14:39:11Z","references":["https://osv.dev/vulnerability/GHSA-g2fm-8hr4-j82h","https://github.com/EasyCorp/EasyAdminBundle/security/advisories/GHSA-g2fm-8hr4-j82h","https://nvd.nist.gov/vuln/detail/CVE-2026-81892","https://github.com/EasyCorp/EasyAdminBundle/commit/03be45c6b7213c4c984a1d0542b7ec60359329f8","https://github.com/EasyCorp/EasyAdminBundle/commit/6228dfef598d81eeb0baa35625e50812f3c77699","https://github.com/EasyCorp/EasyAdminBundle","https://github.com/EasyCorp/EasyAdminBundle/releases/tag/v4.29.16","https://github.com/EasyCorp/EasyAdminBundle/releases/tag/v5.5.1","https://github.com/FriendsOfPHP/security-advisories/blob/master/easycorp/easyadmin-bundle/CVE-2026-81892.yaml"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-g2fm-8hr4-j82h","url":"https://osv.dev/vulnerability/GHSA-g2fm-8hr4-j82h"}],"summary":"EasyAdmin custom-action dispatcher bypasses access_control on other routes"}