---
id: CVE-2026-92917
title: Grav is a flat-file CMS
summary: >-
  Grav is a flat-file CMS. In versions 2.0.0-rc.1 through 2.0.21, the Twig
  content sandbox fails to restrict the dump and serialize filters (print_r,
  vardump, json_encode, yaml_encode, string):
  GravExtension::assertSandboxDumpSafe() determ…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-200
vendor: getgrav
product: grav
affected:
  - grav >= 2.0.0-rc.1 < 2.0.22
published: '2026-09-17'
updated: '2026-09-19'
sourceUpdated: '2026-09-19T03:17:18.167'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-92917'
references:
  - url: 'https://github.com/getgrav/grav/security/advisories/GHSA-rfr9-7h4p-gx2x'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/grav-2.0.0-rc.1-through-2.0.21-configuration-disclosure-via-print-r
    label: disclosure@vulncheck.com
  - url: 'https://github.com/getgrav/grav/security/advisories/GHSA-rfr9-7h4p-gx2x'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
epss: 0.00458
epssPercentile: 0.37106
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-09-19T02:16:12.538693Z'
ingestedAt: '2026-09-17T12:16:56.813Z'
---

## Overview

Grav is a flat-file CMS. In versions 2.0.0-rc.1 through 2.0.21, the Twig content sandbox fails to restrict the dump and serialize filters (print_r, vardump, json_encode, yaml_encode, string): GravExtension::assertSandboxDumpSafe() determines sandbox state by calling SandboxExtension::isSandboxed() without a Source argument, which reports only the global sandbox flag that Grav never enables, so the guard added in GHSA-mc5q-6hpj-rp7j never executes. As a result, an authenticated user with page-edit rights can render {{ config|print_r }} in page content with Twig processing enabled and dump Grav's entire merged configuration — print_r reflects the real Config object held in a private property of the SandboxConfig facade, bypassing its path redaction — exposing plugin secrets such as SMTP credentials, API tokens, webhook secrets and cache backend passwords. Grav 1.7 is not affected because it ships no Twig content sandbox. The issue is fixed in 2.0.22, where the affected filters are registered with Twig's needs_is_sandboxed flag.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.