CVE-2026-109317

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-109317
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-109317.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-109317
Aliases
  • GHSA-m2rq-76vx-vv4j
Published
2026-10-12T16:05:10Z
Modified
2026-10-14T02:47:43Z
Severity
  • 8.6 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Grav API Plugin before 1.0.36 Privilege Escalation via Scalar Access Grants
Details

Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin or api parent grants. Attackers with api.users.write can edit account access maps or invitations so the inheriting permission resolver satisfies requireSuper checks, accessing super-only API endpoints.

Database specific 
{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-269"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109317.json"
}
References

Affected packages

Git / github.com/getgrav/grav-plugin-api

Affected ranges

Type
GIT
Repo
https://github.com/getgrav/grav-plugin-api
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0a65379b002374a59d4d1ccf76c0806878f8c6b2
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "1.0.36"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

1.*
1.0.0
1.0.0-beta.1
1.0.0-beta.10
1.0.0-beta.11
1.0.0-beta.12
1.0.0-beta.13
1.0.0-beta.14
1.0.0-beta.15
1.0.0-beta.16
1.0.0-beta.17
1.0.0-beta.2
1.0.0-beta.3
1.0.0-beta.4
1.0.0-beta.5
1.0.0-beta.6
1.0.0-beta.7
1.0.0-beta.8
1.0.0-beta.9
1.0.0-rc.1
1.0.0-rc.10
1.0.0-rc.11
1.0.0-rc.12
1.0.0-rc.13
1.0.0-rc.14
1.0.0-rc.15
1.0.0-rc.16
1.0.0-rc.2
1.0.0-rc.3
1.0.0-rc.4
1.0.0-rc.5
1.0.0-rc.6
1.0.0-rc.7
1.0.0-rc.8
1.0.0-rc.9
1.0.1
1.0.10
1.0.11
1.0.12
1.0.13
1.0.14
1.0.15
1.0.16
1.0.17
1.0.18
1.0.19
1.0.2
1.0.20
1.0.21
1.0.22
1.0.23
1.0.24
1.0.25
1.0.26
1.0.27
1.0.28
1.0.29
1.0.3
1.0.30
1.0.31
1.0.32
1.0.33
1.0.34
1.0.35
1.0.4
1.0.5
1.0.6
1.0.7
1.0.8
1.0.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-109317.json"