Critical · published January 15, 2026
🚨 A tiny parameter is the key to chaos! The GravCMS 1.10.7 scheduler endpoint can be tricked into running arbitrary PHP code — like a puppet show where the strings are entirely in the wrong hands! 🔥 Think of the scheduler as a restaurant that takes orders without checking the ID of the diner. If a rogue customer slips in a fraudulent order, they could potentially serve a dish no one wants — like executing harmful commands instead of the delicious meals everyone expects! An attacker can exploit this vulnerability to write arbitrary YAML configurations, which could lead to complete system command execution. Imagine them sneaking in to run any command they want on your server! This is absolutely devastating for any site relying on this version of GravCMS, creating a direct line for malicious activity.
Think of the scheduler as a restaurant that takes orders without checking the ID of the diner. If a rogue customer slips in a fraudulent order, they could potentially serve a dish no one wants — like executing harmful commands instead of the delicious meals everyone expects! This vulnerability arises from an unauthenticated access flaw in GravCMS, allowing attackers to manipulate the admin-nonce parameter to inject malicious base64-encoded payloads. Once in, they can create harmful jobs that execute PHP code with system-level access.
An attacker can exploit this vulnerability to write arbitrary YAML configurations, which could lead to complete system command execution. Imagine them sneaking in to run any command they want on your server! This is absolutely devastating for any site relying on this version of GravCMS, creating a direct line for malicious activity. Update GravCMS immediately to version 1.10.8 or later to close this vulnerability. Additionally, review your configuration settings to ensure that unauthorized access is tightly controlled and consider implementing security measures to limit access to the scheduler endpoint. You've got this! Stay vigilant and patch up your system to keep those cyber villains at bay! 🛡️