Queueing Library Vulnerability in CakePHP Affects Job Processing

CVE-2026-54713

What is CVE-2026-54713?

The CakePHP Queue library contains a vulnerability that allows an unauthenticated attacker to manipulate job parameters, leading to identifier collisions due to dropped associative-array keys. This flaw can result in legitimate jobs being ignored or processed as duplicates, impacting the reliability of job execution. Users are advised to upgrade to version 2.3.1 or later to mitigate this issue and ensure proper job management.

References