CVE-2026-22692 - Vulnerability Analysis

Overview

October CMS < 3.7.13 and 4.0.0 to 4.1.4 contain a sandbox bypass caused by improper restriction of methods on the collect() helper in Twig safe mode, letting authenticated users with template editing permissions bypass sandbox protections, exploit requires CMS_SAFE_MODE enabled and authenticated backend access with template editing permissions.

Severity & Score

Impact

Authenticated users with template editing permissions can bypass sandbox protections, potentially leading to code execution or privilege escalation.

Mitigation

Upgrade to versions 3.7.13 or 4.1.5 or later; alternatively disable CMS_SAFE_MODE and restrict template editing permissions to trusted administrators.

References

• https://github.com/octobercms/october/security/advisories/GHSA-m5qg-jc75-4jp6

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner