CVE-2025-66297

HIGH EPSS 46.9%
Published Dec 1, 20257mo ago · Modified Jun 17, 20261w ago
7.4 CVSS 4.0
High
Find Similar
Published Dec 1, 2025 7mo ago
Last Modified Jun 17, 2026 1w ago

Description

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a user with admin panel access and permissions to create or edit pages in Grav CMS can enable Twig processing in the page frontmatter. By injecting malicious Twig expressions, the user can escalate their privileges to admin or execute arbitrary system commands via the scheduler API. This results in both Privilege Escalation (PE) and Remote Code Execution (RCE) vulnerabilities. This vulnerability is fixed in 1.8.0-beta.27.

CVSS Details

Base Score
7.4
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
46.9% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-1336

Affected Products 27

VendorProductVersionRange
getgravgrav* <1.8.0
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any
getgravgrav1.8.0any

References 2

  • github.com https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458
    Patch
  • github.com https://github.com/getgrav/grav/security/advisories/GHSA-858q-77wx-hhx6
    ExploitThird Party Advisory

Remediation

  • github.com https://github.com/getgrav/grav/commit/e37259527d9c1deb6200f8967197a9fa587c6458
    Patch