CVE-2026-74791: Scriban before 7.0.0 Authorization Bypass via Stale Include Cache
Published Aug 16, 2026
·Updated
Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers can exploit request-dependent ITemplateLoader implementations to access previously authorized template content from earlier renders without triggering TemplateLoader.Load() again.
Affected Software
1 affected component
Scriban Scriban<7.0.0
Event History
Aug 16, 2026
CVE Published
via MITRE·01:14 PM
Data Sourced
via MITRE·01:14 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-74791?
CVE-2026-74791 has a high severity rating of 8.6.
2
How do I fix CVE-2026-74791?
To mitigate CVE-2026-74791, upgrade to Scriban version 7.0.0 or later.
3
What kind of vulnerability is CVE-2026-74791?
CVE-2026-74791 is an authorization bypass vulnerability caused by a stale include cache.
4
Which versions of Scriban are affected by CVE-2026-74791?
Scriban versions prior to 7.0.0 are affected by CVE-2026-74791.
5
How can an attacker exploit CVE-2026-74791?
An attacker can exploit CVE-2026-74791 by accessing cached templates through reused contexts.