CVE-2026-85604

Cve • September 4, 2026

Grav before 2.0.19 (affected versions <= 2.0.17) contains a remote code execution vulnerability in the Twig sort filter. The sortFunc wrapper in GravExtension.php hardcodes Twig's isSandboxed argument to false, so unlike |map/|filter/|reduce, |sort accepts a plain function name inside the sandbox; the remaining denylist misses spl_autoload, which performs a PHP include. An authenticated user with only page-write rights (admin.pages or api.pages.write) can supply a crafted payload (e.g., via form frontmatter rendered by the Email plugin) that invokes spl_autoload through the sort filter, resulting in arbitrary PHP execution as the web server user.

CWE-94 : Improper Control of Generation of Code ('Code Injection')

Default Status: unaffected

arpitjain099 reporter

github.com: GitHub Security Advisory (GHSA-p6qj-p5m7-f62h) external site vendor-advisory

vulncheck.com: VulnCheck Advisory: Grav before 2.0.19 Remote Code Execution via sort filter external site third-party-advisory

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Remote Code Execution Vulnerability in Grav's Twig Sort Filter Grav versions before 2.0.19, specifically 2.0.17 and earlier, are vulnerable to a remote code execution flaw in the Twig sort filter. The vulnerability arises from the sortFunc wrapper in GravExtension.php, which hardcodes the isSandboxed argument to false, allowing an attacker to invoke spl_autoload through the sort filter. An authenticated user with only page-write rights can exploit this by submitting a crafted payload via form frontmatter rendered by the Email plugin, leading to arbitrary PHP execution as the web server user. This vulnerability is documented as CVE-2026-85604 and was published on September 4, 2026. The attack vector is particularly concerning as it does not require elevated privileges beyond page-editing rights. The flaw has a broad impact, affecting numerous internal functions and allowing various dangerous operations. Current status indicates that the vulnerability is known and has been disclosed, but no active exploitation has been reported. 2 sources 58

Extracted Entities

CVE-2026-85604

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Domains (1)

MITRE ATT&CK (1)

Platforms (3)