Is there a patch available for CVE-2026-1770?

Yes, a patch is available for CVE-2026-1770. Update the affected software to the latest version immediately.

Crafter Studio CVE-2026-1770

Improper Control of Dynamically-Managed Code Resources (CWE-913)

2026-02-02 security@craftersoftware.com

GHSA-gj28-gw7w-3pxc

RCE Command Injection

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 22:01 vuln.today

CVE Published

Feb 02, 2026 - 17:16 nvd

N/A

DescriptionCVE.org

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox restrictions and obtain RCE (Remote Code Execution).

AnalysisAI

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.

Technical ContextAI

Classified as CWE-913 (Improper Control of Dynamically-Managed Code Resources). Affects Crafter Studio of Crafter CMS. Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox restrictions and obtain RCE (Remote Code Execution).