Junglewise Threat Intelligence

CVE-2026-54718: Silverstripe Advanced Workflow RCE in email template

CVE-2026-54718 · Severity: high · CVSS 7.2 · Published 2026-08-27

Executive brief

Silverstripe Advanced Workflow is a plugin that automates document routing and approvals in the Silverstripe CMS. An authenticated admin user can inject malicious code through the workflow email template field, leading to complete server compromise. This allows an attacker to read sensitive data, modify application logic, or take the system offline entirely.

Technical details

The vulnerability exists in the advanced workflow email template field, which suffers from improper input validation and inadequate neutralization of special template engine syntax (CWE-20, CWE-1336). An authenticated user with high-level privileges can craft a payload containing template directives or code expressions that are processed by the template engine without proper sanitization. When the workflow triggers email notifications, the malicious payload is evaluated server-side, resulting in arbitrary code execution with the privileges of the web server process. The attack requires authenticated access with administrative or workflow configuration permissions but no user interaction once the payload is planted. Patches are available in versions 6.4.5, 7.1.3, and 7.2.1.

Affected products

  • Silverstripe Advanced Workflow < 6.4.5, >= 7.0.0 < 7.1.3, >= 7.2.0 < 7.2.1

Timeline

  • 2026-06-24: disclosed: Vulnerability initially published in GitHub Advisory Database
  • 2026-06-24: patched: Patches released for versions 6.4.5, 7.1.3, and 7.2.1
  • 2026-08-27: advisory: Advisory updated and published to GitHub Advisory Database

References