CVE-2026-85603: External Control of File Name or Path in getgrav grav
Description
Grav versions before 1.10.55 contain a path traversal vulnerability in the admin plugin's Save As action that fails to validate the language code parameter. An authenticated admin user with admin.pages.create permission can supply directory traversal sequences in the lang POST field to write arbitrary .md files outside the pages directory with attacker-controlled content.
CVSS v4.0
Score 7.1high
Affected software
getgrav
grav
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-85603 is a path traversal vulnerability affecting Grav CMS versions prior to 1.10.55. The issue exists in the admin plugin's Save As functionality, where the language code parameter (lang POST field) is not properly validated. An authenticated admin user with the admin.pages.create permission can exploit this to write arbitrary .md files outside the pages directory by supplying directory traversal sequences. This could lead to unauthorized file creation or modification within the Grav installation.
Potential Impact
An attacker with authenticated admin access and the admin.pages.create permission can write arbitrary markdown files outside the designated pages directory. This could potentially allow unauthorized content injection or modification within the Grav CMS environment. The vulnerability has a CVSS 4.0 score of 7.1 (high severity), indicating a significant risk if exploited.
Mitigation Recommendations
A fix is available in Grav version 1.10.55. Users should upgrade to version 1.10.55 or later to remediate this vulnerability. Until patched, restrict admin access to trusted users only and monitor for suspicious activity related to file creation in the Grav installation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-09-04T11:00:28.731Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a9aada3acd9273b4981da2f
Added to database: 09/04/2026, 11:38:11 UTC
Last enriched: 09/14/2026, 22:40:13 UTC
Last updated: 10/19/2026, 18:48:24 UTC
Views: 48
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.