HIGHCVSS v3.1 7.1Vulnerability
CVE-2026-125398
Instatic before 0.0.21 contains an authorization bypass vulnerability in handleRowAuthor that allows authenticated users to skip table-level access checks by loading rows with getDataRow() instead of loadRowForAccess(). Attackers holding content.edit.any but lacking data.system.tables.read can send PATCH requests to /admin/api/cms/data/rows/:id/author to read system-table rows and reassign their authors.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-10T23:33:48.924589+00:00
- Epss score
- 0.00276
- Cvss severity
- HIGH
- Cvss score
- 7.1
- Retrieved at
- 2026-11-10T23:35:17+00:00
- Last source
- FIRST EPSS
- Score
- 7.1
- Cvss version
- 3.1
- Cve id
- CVE-2026-125398
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- First seen by Signal
- 2026-11-10T03:20:44+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- Published at
- 2026-11-10T00:17:14.070
- Last modified
- 2026-11-10T00:17:14.070
- Epss percentile
- 0.20164
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph