CVE-2026-85603

Name of the Vulnerable Software and Affected Versions Grav versions prior to 1.10.55

Description A path traversal issue exists in the admin plugin's Save As action due to improper validation of the language code parameter. An authenticated admin user with admin.pages.create permission can use directory traversal sequences in the lang POST field to write arbitrary .md files with controlled content outside the pages directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder.

Recommendations Update to version 1.10.55 or later.