CVE-2026-55886

Received Received - Intake

Prototype Pollution in Jodit Editor

Publication date: 2026-07-01

Last updated on: 2026-07-01

Assigner: GitHub, Inc.

Description

Jodit Editor is a WYSIWYG editor with written in pure TypeScript file and image editing capabilities. Versions prior to 4.12.26 are vulnerable to Prototype Pollution through Jodit.modules.Helpers.set(chain, value, obj), which walks the dot-separated chain, creating and following each path segment without filtering prototype-mutating keys. A chain that begins with (or contains) __proto__, constructor, or prototype lets the final assignment reach and mutate Object.prototype. Applications that pass a user-controlled or partially user-controlled key path into Jodit.modules.Helpers.set() could be vulnerable, causing unexpected property injection, logic bypass, denial of service, or secondary security issues. This issue has been fixed in version 4.12.26.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-01

Last Modified

2026-07-01

Generated

2026-07-02

AI Q&A

2026-07-02

EPSS Evaluated

N/A

NVD

CVE-2026-55886

Affected Vendors & Products

Vendor	Product	Version / Range
jodit	editor	to 4.12.26 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1321	The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.

Attack-Flow Graph

Executive Summary

The vulnerability in Jodit Editor versions prior to 4.12.26 is a Prototype Pollution issue. It occurs through the function Jodit.modules.Helpers.set(chain, value, obj), which processes a dot-separated chain to set values on an object. This function does not filter out keys that can mutate the prototype, such as __proto__, constructor, or prototype. If an attacker can control or partially control the key path passed to this function, they can modify Object.prototype, leading to unexpected property injection.

This can cause various problems including logic bypass, denial of service, or other secondary security issues. The vulnerability was fixed in version 4.12.26.

Impact Analysis

This vulnerability can impact you by allowing an attacker to inject or modify properties on Object.prototype, which can lead to unexpected behavior in your application.

Unexpected property injection
Logic bypass
Denial of service
Secondary security issues resulting from prototype pollution

Mitigation Strategies

To mitigate this vulnerability, upgrade Jodit Editor to version 4.12.26 or later, where the Prototype Pollution issue has been fixed.

Hi! I’m here to help you understand CVE-2026-55886. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70