Authentication Vulnerability in Payload CMS Affects Session Security
CVE-2026-105861
7.2HIGH
What is CVE-2026-105861?
In Payload CMS, a vulnerability exists that allows an attacker to exploit the authenticated external URL-based upload retrieval feature. This flaw arises from the unverified redirection of authentication data, which can potentially send session information to an unintended destination. This situation may lead to session hijacking, compromising user accounts and sensitive information. Developers are advised to upgrade to version 3.90.0 or later to mitigate this risk. For more information, visit the detailed advisory here and check the fix in the release notes.
Affected Version(s)
payload > 3.0.0, < 3.90.0 > 3.0.0, 3.90.0
payload > 4.0.0-canary.0, < 4.0.0-canary-34 > 4.0.0-canary.0, 4.0.0-canary-34