PT-2026-73158

CVE-2026-74790

Published

2026-03-24

Updated

2026-08-17

Description by

CVSS 4.0

9.3

Critical

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Scriban versions prior to 7.0.0

Description Scriban caches TypedObjectAccessor based solely on the type, ignoring changes made to the MemberFilter. This behavior allows reused TemplateContext instances to expose members that were intended to be hidden. An attacker can bypass sandbox policies across different requests or tenants by reusing a TemplateContext after its MemberFilter has been tightened, thereby gaining access to filtered properties and fields.

Recommendations Update to version 7.0.0 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Zwique

Vendors

Affected products

Weakness enumeration

CWE-693: Protection Mechanism Failure

Related identifiers