Quick answers
- Is This vulnerability exploited in the wild?
- No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.
- How severe is This vulnerability?
- Medium severity, with a CVSS score of 6.5, published 25 August 2026.
- Which products and versions are affected?
- getgrav/grav (Packagist) < 2.0.16.
- Is there a fix for This vulnerability?
- A patch was published on 2026-08-10: Version 2.0.16 patched the primary advisory GHSA-p597-crqc-m349 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is This vulnerability attacked?
- It is attacked over the network.
- Am I affected?
- Check whether you run getgrav/grav (Packagist) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is an information-disclosure flaw in the Twig template sandbox implementation. Grav's Twig::init() method unconditionally exposes raw system, site, and theme configuration arrays into the template context, and processPage() copies these unfiltered into sandboxed renders. Although a filtered config facade is substituted, the system, site, and theme arrays bypass the sandbox entirely since Twig's SecurityPolicy only gates method/property access on objects—not array subscript or dot notation access. An attacker with page-content edit access can use Twig expressions like {{ system.cache.redis.password }} to read nested secret values, completely bypassing config_denied_paths restrictions. No patch is available as of the advisory date; the vulnerability was fixed in version 2.0.16 (though this advisory is marked withdrawn as a duplicate).
Affected products
- Grav Grav CMS < 2.0.16
Timeline
- 2026-08-25: disclosed
- 2026-08-25: advisory
- 2026-08-10: patched: Version 2.0.16 patched the primary advisory GHSA-p597-crqc-m349