CVE-2026-72820
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAV_ROOT when not in the hard-coded deny-list. Attackers with profile editor access can configure backup profiles with traversal paths to expose sensitive files from locations like /opt, /mnt, or /srv.
Risk Assessment
The risk includes unauthorized access to sensitive system files, potentially leading to data leakage and infrastructure security compromise.
Recommendation
Update Grav to version 2.0.13 or later and restrict backup profile editing permissions to trusted administrators only.
Original NVD description (English source)
Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAV_ROOT when not in the hard-coded deny-list. Attackers with profile editor access can configure backup profiles with traversal paths to expose sensitive files from locations like /opt, /mnt, or /srv.