CVE-2026-74791

HIGH

CVE: CVE-2026-74791 - Scriban before 7Sign in to save

CVSS

8.6

CVSS v3.1

EPSS

N/A

Exploit Prediction Score

Published

August 16, 2026

Exploitability

No EPSS data available

Description

Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers can exploit request-dependent ITemplateLoader implementations to access previously authorized template content from earlier renders without triggering TemplateLoader.Load() again.

Weaknesses

CWE-226

Affected Packages

No package data available.

Aliases

CVE-2026-74791

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://github.com/scriban/scriban/security/advisories/GHSA-x6m9-38vm-2xhf
https://www.vulncheck.com/advisories/scriban-before-authorization-bypass-via-stale-include-cache