EUVD-2026-38442
GHSA-32fw-h446-j4hh
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
ReconObtain Grav admin credentials
-
DeliveryLog into admin panel
-
ExploitCraft SVG with XXE SYSTEM entity
-
InstallUpload via Pages Media tab
-
C2Server parses SVG with simplexml_load_string
-
ExecuteExfiltrate /etc/passwd and user/accounts YAML
-
ImpactEscalate using harvested secrets
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A02:2025 - Security Misconfiguration
ASVS 5.0
V13 - Configuration XML external entity prevention
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires valid authenticated access to the Grav admin panel (CVSS PR:L) with permission to upload media via Pages → Media or the File Manager plugin, against a Grav installation older than 2.0.0-beta.2 where simplexml_load_string() processes SVG content without LIBXML_NONET or an entity-loading guard. No user interaction is needed beyond the attacker's own upload, and no special non-default configuration is required - SVG upload is a standard admin capability. Exploitation is limited by the admin-credential prerequisite and by any network controls (IP allowlists, VPN) gating reachability of /admin. |
| Impact | The supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N) correctly characterizes the bug as network-reachable but requiring low-privilege authentication, with high confidentiality impact and no integrity or availability impact at the base level - a realistic 7.1. EPSS and CISA KEV status were not provided in the input, so likelihood of mass exploitation cannot be quantified, but the requirement for valid Grav admin credentials substantially limits opportunistic attack - this is a credential-amplification / post-compromise lateral capability rather than a pre-auth RCE. The GHSA advisory's own POC and step-by-step reproduction means weaponization barrier is essentially zero once an attacker has admin access; risk is highest for multi-tenant Grav deployments, environments with weak admin password hygiene, or chained scenarios where a lower-privilege flaw grants admin entry. Note one minor inconsistency: the GHSA advisory text quotes CVSS 7.5 while the assigned vector resolves to 7.1 - both place severity in the High band. |
| Exploit ScenarioDerived | An attacker who has obtained Grav admin credentials - through phishing, password reuse, or a separate vulnerability - logs into the admin panel, navigates to any page's Media tab, and uploads a crafted SVG containing a DOCTYPE declaration with a SYSTEM entity pointing at file:///srv/grav/user/accounts/admin.yaml. The server parses the SVG via simplexml_load_string(), inlines the file contents into the rendered/stored output, and the attacker harvests admin password hashes, 2FA seeds, and .env secrets to escalate to full host compromise. A complete POC payload is published in the GHSA advisory. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jun 23, 2026
Arbitrary file disclosure in Grav CMS versions prior to 2.0.0-beta.2 allows authenticated admin-panel users to read sensitive server files via XML External Entity (XXE) injection in SVG upload processing. The flaw stems from simplexml_load_string() being called without entity-loader protections, enabling exfiltration of credentials, configuration, and environment secrets. No public exploit identified at time of analysis, though the GHSA advisory includes a working proof-of-concept payload.
RemediationAI
Vendor-released patch: upgrade Grav to 2.0.0-beta.2 or later, which corresponds to upstream commit 5a12f9be8314682c8713e569e330f11805d0a663 (https://github.com/getgrav/grav/commit/5a12f9be8314682c8713e569e330f11805d0a663); see the GHSA advisory at https://github.com/getgrav/grav/security/advisories/GHSA-3446-6mgw-f79p for full details. Operators unable to immediately upgrade should restrict admin-panel access by IP allowlist and enforce strong/MFA-protected admin credentials to shrink the authenticated attack surface, and can disable or block SVG uploads in the Media and File Manager workflows (trade-off: legitimate users lose SVG asset support) until patched. As a deeper defense-in-depth measure, harden the PHP runtime by ensuring libxml_disable_entity_loader(true) or equivalent LIBXML_NONET handling is in effect for any custom SVG processing, with the side effect that legitimately referenced external resources in XML will no longer resolve.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 2 packages in composer, euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Grav is a flat-file PHP CMS by Trilby Media that stores content as Markdown/YAML rather than in a database. The vulnerable code path uses PHP's libxml-backed simplexml_load_string() to parse uploaded SVG files (which are XML documents) in the Pages → Media and File Manager upload handlers, without passing LIBXML_NONET or otherwise disabling external entity resolution. CWE-611 (Improper Restriction of XML External Entity Reference) covers this class: when an XML parser resolves a DOCTYPE-declared SYSTEM entity such as file:///etc/passwd, the file contents are inlined into the parsed document and returned to the attacker, also enabling SSRF via http(s) URIs and billion-laughs DoS via recursive entity expansion. The single affected CPE is cpe:2.3:a:grav:grav.
Know when Grav gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Network-reachable admin upload (AV:N/AC:L), requires authenticated admin (PR:L), no UI; reads arbitrary files so C:H, but no write or DoS at base, so I:N/A:N.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
1DescriptionCVE.org
Grav before 2.0.0-beta.2 contains an XML external entity injection vulnerability in SVG file upload processing that allows authenticated attackers to read arbitrary files. The application uses simplexml_load_string without disabling external entity loading, enabling attackers to inject XXE payloads via malicious SVG files to exfiltrate sensitive data.
Executive ViewAI
Grav CMS versions prior to 2.0.0-beta.2 contain a file disclosure flaw in SVG upload handling that allows authenticated administrators to exfiltrate credentials, configuration, and environment secrets via XXE injection. Proof-of-concept code is available in vendor advisories, significantly lowering the barrier to exploitation for organizations where admin accounts may be compromised. Organizations must immediately secure admin access and assess the sensitivity of data stored on affected Grav CMS servers.
Restrict admin panel access to known IP addresses and require multi-factor authentication; disable SVG upload functionality until upgrading to version 2.0.0-beta.2 or later; audit admin user privileges and remove unnecessary accounts; implement file access monitoring for sensitive directories containing credentials or configuration.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
XML External Entity (XXE) attacks exploit XML parsers that process Document Type Definitions (DTDs) without proper restrictions.
Malicious file upload attacks exploit insufficient validation when web applications accept user-provided files.
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Server-side template injection (SSTI) in Grav (getgrav/grav) prior to 1.8.0-beta.27 allows an authenticated attacker hol
Broken access control in Grav CMS (CWE-285) before 1.8.0-beta.27 lets an authenticated editor-level user escalate their
A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plug
Grav is a file-based Web platform. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low a
GravCMS 1.10.7 allows unauthenticated remote attackers to write arbitrary YAML configuration files, leading to full serv
Remote code execution in Grav CMS 2.0.4 (fixed in 2.0.7) lets an authenticated user holding the admin.pages or api.pages
Remote code execution in Grav CMS before 2.0.15 allows attackers holding page-edit or blueprint-config privileges to wri
Vertical privilege escalation in Grav CMS before 2.0.14 lets a delegated administrator holding only the admin.users perm
Stored cross-site scripting in Grav CMS before 2.0.15 lets authenticated editors smuggle JavaScript event handlers past
Server-side request forgery (SSRF) in Grav CMS versions prior to 1.7.49.5 allows remote authenticated attackers to make
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, Grav CMS is vulnerable to a Server-Side Template Injection (S
Remote code execution in Grav CMS before 2.0.13 allows authenticated low-privilege users to plant and execute arbitrary
Exploit-DB