Vulnerability Database

314,615

Total vulnerabilities in the database

CVE-2025-66296

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a privilege escalation vulnerability exists in Grav’s Admin plugin due to the absence of username uniqueness validation when creating users. A user with the create user permission can create a new account using the same username as an existing administrator account, set a new password/email, and then log in as that administrator. This effectively allows privilege escalation from limited user-manager permissions to full administrator access. This vulnerability is fixed in 1.8.0-beta.27.

  • Published: Dec 1, 2025
  • Updated: Dec 2, 2025
  • CVE: CVE-2025-66296
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
Composer icon getgrav / grav 1.7.49.5 1.8.0
Composer icon getgrav / grav 1.8.0-beta1 1.8.0-beta1.x
Composer icon getgrav / grav 1.8.0-beta10 1.8.0-beta10.x
Composer icon getgrav / grav 1.8.0-beta11 1.8.0-beta11.x
Composer icon getgrav / grav 1.8.0-beta12 1.8.0-beta12.x
Composer icon getgrav / grav 1.8.0-beta13 1.8.0-beta13.x
Composer icon getgrav / grav 1.8.0-beta14 1.8.0-beta14.x
Composer icon getgrav / grav 1.8.0-beta15 1.8.0-beta15.x
Composer icon getgrav / grav 1.8.0-beta16 1.8.0-beta16.x
Composer icon getgrav / grav 1.8.0-beta17 1.8.0-beta17.x
Composer icon getgrav / grav 1.8.0-beta18 1.8.0-beta18.x
Composer icon getgrav / grav 1.8.0-beta19 1.8.0-beta19.x
Composer icon getgrav / grav 1.8.0-beta2 1.8.0-beta2.x
Composer icon getgrav / grav 1.8.0-beta20 1.8.0-beta20.x
Composer icon getgrav / grav 1.8.0-beta21 1.8.0-beta21.x
Composer icon getgrav / grav 1.8.0-beta22 1.8.0-beta22.x
Composer icon getgrav / grav 1.8.0-beta23 1.8.0-beta23.x
Composer icon getgrav / grav 1.8.0-beta24 1.8.0-beta24.x
Composer icon getgrav / grav 1.8.0-beta25 1.8.0-beta25.x
Composer icon getgrav / grav 1.8.0-beta26 1.8.0-beta26.x
Composer icon getgrav / grav 1.8.0-beta3 1.8.0-beta3.x
Composer icon getgrav / grav 1.8.0-beta4 1.8.0-beta4.x
Composer icon getgrav / grav 1.8.0-beta5 1.8.0-beta5.x
Composer icon getgrav / grav 1.8.0-beta6 1.8.0-beta6.x
Composer icon getgrav / grav 1.8.0-beta7 1.8.0-beta7.x
Composer icon getgrav / grav 1.8.0-beta8 1.8.0-beta8.x
Composer icon getgrav / grav 1.8.0-beta9 1.8.0-beta9.x