CVE-2026-100670 | getgrav Grav up to 2.0.24 Blueprint FlexObject::update access.admin.super privileges management

September 26, 2026 Yanac

A vulnerability, which was classified as problematic, was found in getgrav Grav up to 2.0.24. Impacted is the function FlexObject::update of the component Blueprint. Executing a manipulation of the argument access.admin.super can lead to improper privilege management.

The identification of this vulnerability is CVE-2026-100670. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More