# CVE-2026-85055: Twenty CRM field-level permission bypass in filters

Source: https://junglewise.ai/threats/cve-2026-85055-twenty-is-an-open-source-crm-customer-relationship-management  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-22. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-85055 · Severity: info · Published 2026-09-22

Twenty is an open-source customer relationship management platform used to organize company and contact data. Users who are denied access to specific fields can still infer their values by filtering on those restricted fields and observing whether results are returned, allowing them to reconstruct sensitive information from records they can otherwise see.

Technologies: [Twenty](https://junglewise.ai/threats/technologies/twenty). Vendors: [Twenty](https://junglewise.ai/threats/vendors/twenty).

## Quick answers

**Is CVE-2026-85055 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-85055 being exploited in the wild.

**How severe is CVE-2026-85055?** Informational severity, published 22 September 2026.

**Which products and versions are affected?** Twenty before 2.22.0.

**Is there a fix for CVE-2026-85055?** A patch was published on 2026-07-16: Fix released in version 2.22.0 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-85055 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-85055?** Check whether you run Twenty at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

Field-level read permissions in Twenty are enforced on output fields in GraphQL and REST responses, but not on filter predicates in direct filters, relation filters, or persisted view filters. An authenticated user can submit filter conditions on restricted fields and use the resulting totalCount or row presence as a boolean oracle to enumerate denied field values. This affects both direct field filtering and cross-relation filtering through related objects.

## Affected products

- Twenty Twenty before 2.22.0

## Timeline

- 2026-09-22: disclosed
- 2026-07-16: patched: Fix released in version 2.22.0

## References

- [https://github.com/twentyhq/twenty/commit/a5108d512f754a937860bda5e0c2c40c7266e19e](https://github.com/twentyhq/twenty/commit/a5108d512f754a937860bda5e0c2c40c7266e19e)
- [https://github.com/twentyhq/twenty/pull/22873](https://github.com/twentyhq/twenty/pull/22873)

## Related threats

- [Twenty CRM credential disclosure in GraphQL metadata query](https://junglewise.ai/threats/cve-2026-105763-twenty-is-an-open-source-crm-customer-relationship-management)
- [Twenty GraphQL permission bypass in groupBy-with-records resolver](https://junglewise.ai/threats/cve-2026-92771-twenty-graphql-permission-bypass-in-groupby-with-records-resolver)
- [Twenty open redirect in OAuth callback handler](https://junglewise.ai/threats/cve-2026-82274-twenty-open-redirect-in-oauth-callback-handler)
- [Twenty CRM SQL injection in search vector field configuration](https://junglewise.ai/threats/cve-2026-73069-twenty-crm-sql-injection-in-search-vector-field-configuration)
- [Twenty CRM IDOR in AI Agent Monitor](https://junglewise.ai/threats/cve-2026-55583-twenty-crm-idor-in-ai-agent-monitor)