CVE-2026-122053 | Sensiolabs Symfony up to 8.1.10 Serializer ObjectNormalizer isAllowedAttribute privileges management

A vulnerability has been found in Sensiolabs Symfony up to 5.4.55/6.4.49/7.0.x/7.4.22/8.1.10 and classified as critical. This issue affects the function ObjectNormalizer::isAllowedAttribute of the component Serializer ObjectNormalizer. The manipulation leads to improper privilege management.

This vulnerability is traded as CVE-2026-122053. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More