Content Management System Vulnerability in Wagtail by Wagtail
CVE-2026-123819
6.5MEDIUM
What is CVE-2026-123819?
A security flaw in Wagtail allows users with add permissions for a snippet model to access the snippet copy view, even when they lack change and view permissions for the existing snippet. This results in unauthorized exposure of snippet content, which should otherwise be restricted. The issue has been remediated in Wagtail versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2, ensuring that only authorized users can view and manage snippets.
Affected Version(s)
wagtail < 7.0.9 < 7.0.9
wagtail >= 7.1, < 7.3.4 < 7.1, 7.3.4
wagtail >= 7.4, < 7.4.3 < 7.4, 7.4.3