CVE-2026-1770CWE-913

Improper Control of Dynamically-Managed Code Resources in Crafter Studio

Medium · published February 2, 2026

CVSS v4.0
4.5
EPSS
0%
Percentile
40.3
In the wild
Unconfirmed
What it is

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox restrictions and obtain RCE (Remote Code Execution).

The record
Technical detail
CVSS v4.0
4.5 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/AU:N
EPSS
0.00479 · 40.3th percentile
Weakness
CWE-913 · Improper Control of Dynamically-Managed Code Resources
Published
2026-02-02T16:16Z
EPSS history
Timeline
  • 02 FEB 16:16Z
    Improper Control of Dynamically-Managed Code Resources in Crafter Studio
    cvelistv5