Executive brief
Wolf CMS, a content management system, contains a security flaw in its backup and restore module. This vulnerability allows standard users who should not have administrative access to bypass security checks and perform sensitive operations. An attacker could use this to create, download, or restore system backups, potentially leading to the theft of sensitive data or the complete replacement of the website's content.
Technical details
An authorization bypass vulnerability exists in Wolf CMS through version 0.8.3.1 within the BackupRestoreController. The flaw is rooted in a PHP operator precedence error (CWE-697) in the permission check expression used to verify administrative rights. Because the access control expression is evaluated incorrectly, authenticated users with low-level privileges can bypass intended restrictions. This allows an attacker to remotely trigger administrative functions including the creation, downloading, and restoration of site backups. The vulnerability is reachable over the network and requires basic user authentication but no user interaction.
Affected products
- Wolf CMS Wolf CMS through 0.8.3.1
Timeline
- 2026-07-30: disclosed
- 2026-07-30: advisory