Vulnerability Description
Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, the GET /forms endpoint read table and column metadata without applying the document's access rules and did not check that the requested section was actually a form. A user with only partial read access, including public access on a publicly viewable document, could request the metadata of any widget and reveal table and column structure that access rules would otherwise hide, even in documents that contain no forms. This issue is fixed in version 1.7.15.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/gristlabs/grist-core/commit/14694156fe99c438c5f7a452ad367e933
- https://github.com/gristlabs/grist-core/releases/tag/v1.7.15
- https://github.com/gristlabs/grist-core/security/advisories/GHSA-w2hc-w6cg-xvh9
FAQ
What is CVE-2026-55664?
CVE-2026-55664 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Grist is spreadsheet software using Python as its formula language. Prior to 1.7.15, the GET /forms endpoint read table and column metadata without applying the document's access rules and did not che...
How severe is CVE-2026-55664?
CVE-2026-55664 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-55664?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.