CVE-2026-55825 | Contao up to 5.7.6 VirtualFilesystem resolve jobUuid authorization

July 31, 2026 Yanac

A vulnerability was found in Contao up to 5.7.6. It has been rated as problematic. Affected by this issue is the function VirtualFilesystem::resolve of the component VirtualFilesystem. The manipulation of the argument jobUuid leads to authorization bypass.

This vulnerability is listed as CVE-2026-55825. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More