Access Control Vulnerability in TYPO3 Affects User Group Assignments

CVE-2026-46721

What is CVE-2026-46721?

This vulnerability in TYPO3 allows unauthorized users to manipulate user properties during the account creation and editing processes. Without proper restrictions in place, an attacker can assign themselves or other accounts to privileged frontend user groups, thereby gaining access to sensitive content and functionality that should be restricted. It is crucial for TYPO3 users to ensure their systems are updated and to review user permissions and security settings to mitigate this risk.

References