Vulnerability Description
Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hidden. Attackers can access filtered properties and fields by reusing a TemplateContext after tightening its MemberFilter, bypassing sandbox policies across requests or tenants.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/scriban/scriban/security/advisories/GHSA-5wr9-m6jw-xx44
- https://www.vulncheck.com/advisories/scriban-before-memberfilter-bypass-via-temp
- https://github.com/scriban/scriban/security/advisories/GHSA-5wr9-m6jw-xx44
FAQ
What is CVE-2026-74790?
CVE-2026-74790 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hidden. Attackers can ...
How severe is CVE-2026-74790?
CVE-2026-74790 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-74790?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.