# CVE-2026-65897: Grav API Plugin privilege escalation in InvitationsController

Source: https://junglewise.ai/threats/cve-2026-65897-grav-api-plugin-privilege-escalation-in-invitationscontroller  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-23. Updated: 2026-07-23  
License: CC BY 4.0 with a link back

CVE-2026-65897 · Severity: high · CVSS 8.8 · Published 2026-07-23

The Grav API Plugin, used to provide programmatic access to the Grav CMS, contains a flaw in how it handles user invitations. An attacker with basic user-management permissions can invite a new user and assign them to high-privilege groups, such as 'super-admin,' which they themselves do not belong to. This allows a low-level staff member to create a new account with full control over the website and its data.

Technologies: [Grav API Plugin](https://junglewise.ai/threats/technologies/api-plugin). Vendors: [Grav](https://junglewise.ai/threats/vendors/grav).

## Quick answers

**Is CVE-2026-65897 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-65897 being exploited in the wild.

**How severe is CVE-2026-65897?** High severity, with a CVSS score of 8.8, published 23 July 2026.

**Which products and versions are affected?** Grav API Plugin < 1.0.10.

**Is there a fix for CVE-2026-65897?** A patch was published on 2026-07-23: Fix released in version 1.0.10 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-65897 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-65897?** Check whether you run Grav API Plugin at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A privilege escalation vulnerability exists in the InvitationsController::create() method of the Grav API Plugin. While the controller correctly strips sensitive 'access' flags for non-super-admin callers, it fails to perform an equivalent check on the 'groups' field. An authenticated attacker with 'api.users.write' permissions can submit an invitation request containing arbitrary group names. When the invitation is accepted, the new account inherits the permissions of those groups, including 'api.super' if specified. This bypasses the security policy defined in the core account blueprints and is inconsistent with the stricter validation performed in the standard UsersController. The issue is resolved in version 1.0.10.

## Affected products

- getgrav Grav API Plugin < 1.0.10

## Timeline

- 2026-07-09: advisory: GitHub Security Advisory GHSA-m86m-jjcg-gcvv published
- 2026-07-23: disclosed: CVE-2026-65897 published to NVD
- 2026-07-23: patched: Fix released in version 1.0.10

## References

- [https://github.com/getgrav/grav/commit/345e79e3abf8c15f80e612a09f6643300071324b](https://github.com/getgrav/grav/commit/345e79e3abf8c15f80e612a09f6643300071324b)
- [https://github.com/getgrav/grav/commit/f9438d4e71389b1041ac60b69b0b5714ecfa3bdd](https://github.com/getgrav/grav/commit/f9438d4e71389b1041ac60b69b0b5714ecfa3bdd)
- [https://github.com/getgrav/grav/security/advisories/GHSA-m86m-jjcg-gcvv](https://github.com/getgrav/grav/security/advisories/GHSA-m86m-jjcg-gcvv)
- [https://www.vulncheck.com/advisories/grav-api-plugin-privilege-escalation-via-invitations-groups](https://www.vulncheck.com/advisories/grav-api-plugin-privilege-escalation-via-invitations-groups)

## Related threats

- [Grav API plugin session validation bypass in disabled accounts](https://junglewise.ai/threats/cve-2026-109320-the-grav-api-plugin-grav-plugin-api-before-1-0-36-contains-an)
- [Grav API Plugin password reset link spoofing via Host header](https://junglewise.ai/threats/cve-2026-86196-grav-api-plugin-password-reset-link-spoofing-via-host-header)
- [Grav API Plugin scope cap bypass in page permissions](https://junglewise.ai/threats/cve-2026-80204-grav-api-plugin-scope-cap-bypass-in-page-permissions)
- [Grav API plugin server-side request forgery in webhook delivery](https://junglewise.ai/threats/cve-2026-56708-grav-api-plugin-server-side-request-forgery-in-webhook-delivery)
- [Grav API Plugin privilege escalation in API key management](https://junglewise.ai/threats/cve-2026-64852-grav-api-plugin-privilege-escalation-in-api-key-management)