CVE-2026-48067 | filamentphp filament up to 3.3.50/4.11.3/5.6.3 recordSelectOptionsQuery Select authorization (GHSA-7q3w-xqjw-g3cr)

June 23, 2026 Yanac

A vulnerability classified as problematic was found in filamentphp filament up to 3.3.50/4.11.3/5.6.3. Affected by this vulnerability is the function recordSelectOptionsQuery. The manipulation of the argument Select results in authorization bypass.

This vulnerability is cataloged as CVE-2026-48067. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More