CVE-2026-45703

Name of the Vulnerable Software and Affected Versions Pimcore versions prior to 11.5.17 (LTS) Pimcore versions prior to 12.3.7

Description The WordExport export flow in the TranslationController.php controller fails to enforce object-level view permissions. While the system verifies if a backend user has the word export feature permission, it does not check if the user has the required view permission for the specific target element. This allows an authenticated low-privileged backend user to export sensitive content from elements they are not authorized to see, including page, snippet, email, and object types. The issue occurs because the controller directly resolves the target element using attacker-controlled type and id variables without performing an authorization check such as isAllowed('view').

Recommendations Update to version 11.5.17 (LTS). Update to version 12.3.7.