CVE-2026-65897 | Getgrav Grav Plugin up to 1.0.9 Invitations Controller create groups permission

July 23, 2026 Yanac

A vulnerability marked as problematic has been reported in Getgrav Grav Plugin up to 1.0.9. The affected element is the function InvitationsController::create of the component Invitations Controller. Performing a manipulation of the argument groups results in permission issues.

This vulnerability is known as CVE-2026-65897. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More