CVE-2026-22692

Name of the Vulnerable Software and Affected Versions October versions prior to 3.7.13 October versions 4.0.0 through 4.1.4

Description A sandbox bypass exists in the optional Twig safe mode feature CMS SAFE MODE. Certain methods on the collect() helper were not properly restricted, allowing authenticated users with template editing permissions to bypass sandbox protections. This issue only affects installations where CMS SAFE MODE is enabled, which is disabled by default, and requires authenticated backend access with CMS template editing permissions.

Recommendations Update versions prior to 3.7.13 to 3.7.13. Update versions 4.0.0 through 4.1.4 to 4.1.5. Disable CMS SAFE MODE if untrusted template editing is not required. Restrict CMS template editing permissions to fully trusted administrators only.