CVE-2026-112781
Deferred Deferred - Pending Action

Grav Page Editor Information Disclosure via Frontmatter Config

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: VulnCheck

Description
Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected configuration by adding config-*@ directives to page frontmatter forms. Attackers with page-edit permission can bypass the Twig sandbox config_denied_paths redaction to expose security.salt, plugin credentials, and Redis passwords to all visitors.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-20
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-112781
EUVD
EUVD-2026-104587

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
getgrav grav 2.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Grav CMS versions 2.0.0 to 2.2.1 allows page editors with write permissions to read protected configuration values by using config-*@ directives in page frontmatter forms. The issue bypasses the Twig sandbox's redaction rules, exposing sensitive data like security.salt, plugin credentials, and Redis passwords to all visitors.

Detection Guidance

Check Grav CMS version with 'bin/grav version' or inspect admin panel. Look for unauthorized config-*@ directives in page frontmatter. Review server logs for unusual access to sensitive files like user/config/system.yaml or plugin configs.

Impact Analysis

Attackers with page-edit permissions can access sensitive system information, including security keys and credentials, which could lead to further attacks like unauthorized access, data breaches, or system compromise. The exposed data may also allow attackers to escalate privileges or gain control over the Grav CMS installation.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA due to unauthorized exposure of sensitive data. GDPR requires protection of personal data, while HIPAA mandates safeguarding protected health information. A breach could result in legal penalties, fines, and reputational damage.

Mitigation Strategies

Upgrade Grav CMS to version 2.2.2 or later immediately. Remove any config-*@ directives from page frontmatter. Audit user permissions to ensure only trusted editors have page-edit access. Review exposed credentials and rotate any compromised secrets.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112781. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart