CVE-2026-74790

CRITICAL

CVE: CVE-2026-74790 - Scriban before 7Sign in to save

CVSS

9.1

CVSS v3.1

EPSS

N/A

Exploit Prediction Score

Published

August 16, 2026

Exploitability

No EPSS data available

Description

Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hidden. Attackers can access filtered properties and fields by reusing a TemplateContext after tightening its MemberFilter, bypassing sandbox policies across requests or tenants.

Weaknesses

CWE-693

Affected Packages

No package data available.

Aliases

CVE-2026-74790

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://github.com/scriban/scriban/security/advisories/GHSA-5wr9-m6jw-xx44
https://www.vulncheck.com/advisories/scriban-before-memberfilter-bypass-via-templatecontext-cache