Grav CMS versions 2.0.0-beta.2 and earlier contain a remote code execution vulnerability. This flaw enables an attacker to execute arbitrary code remotely on the affected system. The vulnerability is identified in the beta release 2.0.0-beta.2 and all prior versions. No vendor advisory or patch information is currently available to confirm remediation status. No active exploitation has been reported. The vulnerability is categorized as critical based on its nature and potential impact.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely on the affected Grav CMS server. This could lead to full system compromise, data theft, or service disruption. No specific exploitation details or known active attacks have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the Grav CMS installation and monitor for any unusual activity. Avoid using the affected beta versions in production environments.