CVE-2026-108924 | getkirby Kirby up to 4.9.5/5.5.3 Dynamic Option Generation OptionsQuery.php OptionsQuery::resolve authorization (GHSA-8r9g-hhm3-5jfh)

October 11, 2026 Yanac

A vulnerability identified as problematic has been detected in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads to authorization bypass.

This vulnerability is uniquely identified as CVE-2026-108924. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More