# CVE-2026-105864: Payload multi-tenant plugin access control bypass

Source: https://junglewise.ai/threats/cve-2026-105864-payload-is-a-free-and-open-source-headless-content-management  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-06. Updated: 2026-10-06  
License: CC BY 4.0 with a link back

CVE-2026-105864 · Severity: medium · CVSS 4 · Published 2026-10-06

Payload is a headless content management system with multi-tenant support. An authenticated user who is restricted to one tenant can create new records in other tenants, potentially gaining unauthorized write access to data they should not be able to modify. Read and edit access to existing documents in other tenants remains blocked; only new record creation is exposed.

Vendors: [npm](https://junglewise.ai/threats/vendors/npm), [Payload](https://junglewise.ai/threats/vendors/payload).

## Quick answers

**Is CVE-2026-105864 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-105864 being exploited in the wild.

**How severe is CVE-2026-105864?** Medium severity, with a CVSS score of 4, published 6 October 2026.

**Which products and versions are affected?** @payloadcms/plugin-multi-tenant (npm) SEMVER:introduced=0,fixed=3.90.0; Payload Multi-Tenant Plugin before 3.90.0 and canary versions before 4.0.0-canary.34.

**Is there a fix for CVE-2026-105864?** Yes. @payloadcms/plugin-multi-tenant (npm): upgrade to 3.90.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-105864 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-105864?** Check whether you run @payloadcms/plugin-multi-tenant (npm) or Payload Multi-Tenant Plugin at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- @payloadcms/plugin-multi-tenant (npm): upgrade to 3.90.0 or later

  ```sh
  npm install @payloadcms/plugin-multi-tenant@3.90.0
  ```


## Technical details

An authentication/authorization flaw in the @payloadcms/plugin-multi-tenant allows authenticated users to bypass tenant isolation when creating records, if at least one tenant-enabled collection exists. The vulnerability affects the default tenant assignment logic (in tenantField/index.ts) and was fixed by correcting the totalDocs count calculation. The issue requires authentication and affects cross-tenant write operations only.

## Affected products

- Payload multi-tenant plugin before 3.90.0 and canary versions before 4.0.0-canary.34

## Identifiers

- CVE-2026-105864
- GHSA-xhm9-gwgw-3q2q

## Timeline

- 2026-10-06: disclosed

## References

- [https://github.com/payloadcms/payload/commit/b8fc06a18afb6974dc07f95ac1e541c716e5926b](https://github.com/payloadcms/payload/commit/b8fc06a18afb6974dc07f95ac1e541c716e5926b)
- [https://github.com/payloadcms/payload/releases/tag/v3.90.0](https://github.com/payloadcms/payload/releases/tag/v3.90.0)

## Related threats

- [Payload multi-tenant plugin privilege escalation in tenant assignment](https://junglewise.ai/threats/cve-2026-105860-payload-is-a-free-and-open-source-headless-content-management)