CVE-2026-125106

Name of the Vulnerable Software and Affected Versions Wagtail versions prior to 7.0.9 Wagtail versions prior to 7.3.4 Wagtail versions prior to 7.4.3 Wagtail versions prior to 8.0rc2

Description A user with the submit translations permission can exploit the Admin API copy for translation endpoint to copy a source page they are not authorized to edit. This action allows the user to view the contents of the inaccessible page by copying it into a translation.

Recommendations Update to version 7.0.9 Update to version 7.3.4 Update to version 7.4.3 Update to version 8.0rc2