CVE-2026-55664

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-55664

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55664.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-55664

Aliases

GHSA-w2hc-w6cg-xvh9

Published

2026-07-10T20:59:12.603Z

Modified

2026-07-15T01:48:53.110925749Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Grist: Insufficient access control in the /forms endpoint exposes table metadata

Details

Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, the GET /forms endpoint read table and column metadata without applying the document's access rules and did not check that the requested section was actually a form. A user with only partial read access, including public access on a publicly viewable document, could request the metadata of any widget and reveal table and column structure that access rules would otherwise hide, even in documents that contain no forms. This issue is fixed in version 1.7.15.

Database specific

{
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55664.json",
    "cwe_ids": [
        "CWE-200",
        "CWE-285"
    ]
}

References

Affected packages

Git / github.com/gristlabs/grist-core

Affected ranges

Type

GIT

Repo

https://github.com/gristlabs/grist-core

Events

Introduced

Fixed

14694156fe99c438c5f7a452ad367e933bb194db

Fixed

60447668552eb71de10dc0bf5c71379567e51653

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.7.15"
        }
    ]
}

Affected versions

1.*

1.3.1

1.3.2

v0.*

v0.7.1

v0.7.2

v0.7.3

v0.7.4

v1.*

v1.1.16

v1.3.0

v1.3.1

v1.7.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55664.json"