CVE-2026-24125: TinaCMS graphql path traversal in document mutations

CVE-2026-24125 · Severity: low · CVSS 3.1 · Published 2026-03-12

TinaCMS is an open-source headless CMS that stores content files in a Git repository. A path traversal vulnerability in its GraphQL API allows authenticated editors to create, move, or delete files outside their assigned content directories by using directory traversal sequences. While the impact is limited by schema validation and git tracking, a malicious insider with editor permissions could delete critical configuration files or move sensitive documents outside the collection root.

Technologies: @tinacms/graphql (npm), TinaCMS GraphQL. Vendors: npm, TinaCMS.

Quick answers

Is CVE-2026-24125 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-24125 being exploited in the wild.
How severe is CVE-2026-24125?
Low severity, with a CVSS score of 3.1, published 12 March 2026.
Which products and versions are affected?
@tinacms/graphql (npm) SEMVER:introduced=0,fixed=2.1.2; TinaCMS GraphQL <= 2.1.1.
Is there a fix for CVE-2026-24125?
Yes. @tinacms/graphql (npm): upgrade to 2.1.2 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-24125 attacked?
It is attacked over the network, in a software library.
Am I affected by CVE-2026-24125?
Check whether you run @tinacms/graphql (npm) or TinaCMS GraphQL at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • @tinacms/graphql (npm): upgrade to 2.1.2 or later
    npm install @tinacms/graphql@2.1.2

Technical details

The vulnerability exists in @tinacms/graphql's document mutation handlers (createDocument, updateDocument, deleteDocument, createFolder), which use path.join() to combine collection paths with user-supplied relativePath parameters without validating that the resulting path remains within the collection root directory. An attacker with authenticated GraphQL mutation permissions can inject ../ sequences to escape the collection boundary. The attack vector is network-based and requires low-privilege editor authentication. Mitigating factors include: (1) created/updated content must conform to the collection's GraphQL schema, preventing arbitrary file content injection; (2) all file operations are tracked in git, making changes visible and reversible; and (3) anonymous users cannot access these mutations. The vulnerability does not allow silent modifications or unauthenticated exploitation. Patched in version 2.1.2; affected versions are &lt;= 2.1.1.

Affected products

  • TinaCMS @tinacms/graphql <= 2.1.1

Identifiers

  • CVE-2026-24125
  • GHSA-2238-xc5r-v9hj

Timeline

  • 2026-03-12: disclosed: Vulnerability published on GitHub Security Advisory
  • 2026-03-12: patched: Fix released in version 2.1.2

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.