CVE-2026-124427 Craft CMS 5.0.0 before 5.11.2 GraphQL Schema Scope Bypass via prev/next
CriticalCVSS 9.3
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows anonymous GraphQL clients to read out-of-scope section entries via prev/next fields. Attackers can chain next hops from one visible in-scope entry to enumerate entries and read titles, slugs, and custom-field content from withheld sections.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| craftcms cms | >= 5.0.0, < 5.11.2 | 5.11.2 |
References
- GitHub Security Advisory (GHSA-xpg7-m6gm-4xfh) vendor-advisory
- VulnCheck Advisory: Craft CMS 5.0.0 before 5.11.2 GraphQL Schema Scope Bypass via prev/next third-party-advisory