CVE-2026-109305 | Craft CMS up to 5.10.13 Twig Sandbox privileges management

October 12, 2026 Yanac

A vulnerability classified as critical was found in Craft CMS up to 5.10.13. This impacts an unknown function of the component Twig Sandbox. Such manipulation leads to improper privilege management.

This vulnerability is traded as CVE-2026-109305. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More