UBUNTU-CVE-2026-48808
A vulnerability exists in the Twig PHP template language prior to version 3.27.0 where the sandbox policy enforcement is bypassed due to improper forwarding of the current Source to SandboxExtension::checkPropertyAllowed(). This allows a template author to read public or magic properties that should be restricted by the sandbox policy. The issue is fixed in Twig version 3.27.0.
AI Analysis
Technical Summary
Twig versions prior to 3.27.0 have a sandbox policy enforcement flaw in the column filter. The active sandbox state is passed as a boolean, but the current Source is not forwarded to SandboxExtension::checkPropertyAllowed(), causing SourcePolicyInterface decisions to be ignored. This enables unauthorized reading of public or magic properties that the sandbox policy intends to restrict. The vulnerability is resolved in Twig 3.27.0.
Potential Impact
An attacker with the ability to author templates can bypass sandbox restrictions and access properties that should be disallowed by the sandbox policy. This could lead to unauthorized information disclosure within the context of the application using Twig templates. There are no known exploits in the wild.
Mitigation Recommendations
Upgrade Twig to version 3.27.0 or later, where this vulnerability is fixed. Since this is a code-level vulnerability in the Twig library, applying the official patch by updating the package is the recommended remediation.
UBUNTU-CVE-2026-48808
Description
A vulnerability exists in the Twig PHP template language prior to version 3.27.0 where the sandbox policy enforcement is bypassed due to improper forwarding of the current Source to SandboxExtension::checkPropertyAllowed(). This allows a template author to read public or magic properties that should be restricted by the sandbox policy. The issue is fixed in Twig version 3.27.0.
CVSS v4.0
Affected software
pkg:deb/ubuntu/[email protected]~esm2?arch=source&distro=esm-apps/focalpkg:deb/ubuntu/[email protected]+esm2?arch=source&distro=esm-apps/jammypkg:deb/ubuntu/[email protected]+esm1?arch=source&distro=esm-apps/noblepkg:deb/ubuntu/[email protected]?arch=source&distro=questingpkg:deb/ubuntu/[email protected]~esm1?arch=source&distro=esm-apps/resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Twig versions prior to 3.27.0 have a sandbox policy enforcement flaw in the column filter. The active sandbox state is passed as a boolean, but the current Source is not forwarded to SandboxExtension::checkPropertyAllowed(), causing SourcePolicyInterface decisions to be ignored. This enables unauthorized reading of public or magic properties that the sandbox policy intends to restrict. The vulnerability is resolved in Twig 3.27.0.
Potential Impact
An attacker with the ability to author templates can bypass sandbox restrictions and access properties that should be disallowed by the sandbox policy. This could lead to unauthorized information disclosure within the context of the application using Twig templates. There are no known exploits in the wild.
Mitigation Recommendations
Upgrade Twig to version 3.27.0 or later, where this vulnerability is fixed. Since this is a code-level vulnerability in the Twig library, applying the official patch by updating the package is the recommended remediation.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-48808
- Osv Schema Version
- 1.7.0
- Aliases
- []
- Ecosystems
- ["Ubuntu:Pro:20.04:LTS","Ubuntu:Pro:22.04:LTS","Ubuntu:Pro:24.04:LTS","Ubuntu:25.10","Ubuntu:Pro:26.04:LTS"]
- Database Specific Severity
- null
- Cvss Version
- 4.0
Threat ID: 6a58b49568715ace43da7e15
Added to database: 07/16/2026, 10:38:13 UTC
Last enriched: 07/16/2026, 12:26:10 UTC
Last updated: 07/16/2026, 12:26:10 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.