Is CVE-2026-25544 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-25544 being exploited in the wild.

How severe is CVE-2026-25544?

Low severity, with a CVSS score of 3.1, published 5 February 2026.

Which products and versions are affected?

@payloadcms/drizzle (npm) SEMVER:introduced=0,fixed=3.73.0; Payload Db-D1-Sqlite < 3.73.0; Payload Db-Postgres < 3.73.0; Payload Db-Sqlite < 3.73.0; and 1 more.

Is there a fix for CVE-2026-25544?

Yes. @payloadcms/drizzle (npm): upgrade to 3.73.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-25544 attacked?

It is attacked over the network.

Am I affected by CVE-2026-25544?

Check whether you run @payloadcms/drizzle (npm), Payload Db-D1-Sqlite, Payload Db-Postgres or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-25544: Payload CMS Drizzle SQL injection in JSON/RichText queries

Q: Is there a fix for CVE-2026-25544?

Yes. @payloadcms/drizzle (npm): upgrade to 3.73.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-25544 attacked?

It is attacked over the network.

Q: Am I affected by CVE-2026-25544?

Check whether you run @payloadcms/drizzle (npm), Payload Db-D1-Sqlite, Payload Db-Postgres or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-25544 · Severity: low · CVSS 3.1 · Published 2026-02-05

Payload CMS is a content management system that allows developers to store and query structured data. A critical vulnerability in the Drizzle database adapter allows unauthenticated attackers to inject arbitrary SQL code through JSON or RichText field queries, bypassing normal security controls. An attacker could extract sensitive customer data (emails, password reset tokens) and take over user accounts without needing to know passwords.

Vendors: npm, Payload.

Quick answers

Is CVE-2026-25544 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-25544 being exploited in the wild.
How severe is CVE-2026-25544?: Low severity, with a CVSS score of 3.1, published 5 February 2026.
Which products and versions are affected?: @payloadcms/drizzle (npm) SEMVER:introduced=0,fixed=3.73.0; Payload Db-D1-Sqlite < 3.73.0; Payload Db-Postgres < 3.73.0; Payload Db-Sqlite < 3.73.0; and 1 more.
Is there a fix for CVE-2026-25544?: Yes. @payloadcms/drizzle (npm): upgrade to 3.73.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-25544 attacked?: It is attacked over the network.
Am I affected by CVE-2026-25544?: Check whether you run @payloadcms/drizzle (npm), Payload Db-D1-Sqlite, Payload Db-Postgres or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

@payloadcms/drizzle (npm): upgrade to 3.73.0 or later
```
npm install @payloadcms/drizzle@3.73.0
```

Technical details

The vulnerability is a SQL injection flaw (CWE-89) in the Drizzle-based database adapters for Payload CMS versions before 3.73.0. When querying JSON or richText fields, user input is directly embedded into SQL queries without proper escaping or parameterization. The attack is network-accessible, requires no authentication or user interaction, and affects PostgreSQL and SQLite adapters (@payloadcms/db-postgres, @payloadcms/db-vercel-postgres, @payloadcms/db-sqlite, @payloadcms/db-d1-sqlite). An attacker can perform blind SQL injection to extract sensitive data or modify database contents if at least one collection exposes a JSON/richText field with read access enabled. The patch is available in Payload v3.73.0 and later.

Affected products

Payload CMS < 3.73.0
Payload db-postgres < 3.73.0
Payload db-vercel-postgres < 3.73.0
Payload db-sqlite < 3.73.0
Payload db-d1-sqlite < 3.73.0
Payload drizzle < 3.73.0

Identifiers

CVE-2026-25544
GHSA-xx6w-jxg9-2wh8

Timeline

2026-02-05: disclosed: GHSA-xx6w-jxg9-2wh8 published
2026-02-05: advisory: CVE-2026-25544 assigned
2026-02-05: patched: Payload v3.73.0 released with fix

References

https://github.com/payloadcms/payload/security/advisories/GHSA-xx6w-jxg9-2wh8

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.