Grav CMS CVE-2026-109315

Requires an authenticated Grav account with page-editor privileges and the ability to author Twig in pages, on versions 2.0.22 up to (but not including) 2.1.7; the Clockwork debugger must be active so that profiler records and a system.debugger.token value exist. Exploitation is limited by the need for valid editor credentials and Twig-authoring rights - it is not anonymously reachable - and is remediated by upgrading to 2.1.7, which adds system.debugger.token to the sandbox redaction list.

This is a moderate-priority information disclosure flaw, not a critical emergency. The vendor-supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N) and the 7.1 score agree that exploitation is network-reachable, low-complexity, requires no user interaction, but does require privileges (PR:L) - i.e. an already-authenticated page editor, which meaningfully narrows the attacker population to insiders or anyone who has compromised an editor account. Impact is confidentiality-only (VC:H, with VI/VA:N), consistent with CWE-200 and the description's exposure of configuration, request metadata, and database queries via the Clockwork profiler. No EPSS score, CISA KEV listing, SSVC decision, or POC indicator is present in the input, so there is no signal of active exploitation or automatable mass-scanning; the realistic risk is targeted abuse by a malicious or compromised low-privileged editor rather than widespread opportunistic attacks. No conflicting signals were observed between the CVSS vector and the description - both point to authenticated, remote, confidentiality-only disclosure.

An attacker who holds (or has phished) a Grav page-editor account authors a page containing Twig that renders the omitted system.debugger.token value, which the sandbox redaction list fails to hide. They then replay that token in an X-Clockwork-Auth header to pull Clockwork profiler records, harvesting application configuration, request metadata, and raw database queries. No public exploit code was identified at time of analysis, and exploitation requires an authenticated editor, limiting it to insiders or account-takeover situations.