CVE-2026-75829: grav-plugin-api before 1.0.15 Twig SSTI via translate endpoint
grav-plugin-api versions before 1.0.15 fail to validate Twig content in the translate() endpoint, allowing attackers with api.pages.write permission to persist pages with process.twig enabled. Attackers can submit crafted header and content parameters to execute server-side template injection payloads that are evaluated at render time.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
grav-plugin-apito a version that resolves this vulnerability.Fixed in 1.0.15 - Compensating control
For Grav grav-plugin-api, ensure api.pages.write permission is limited to trusted users only, since the SSTI issue can be exploited by attackers with api.pages.write permission to persist pages with process.twig enabled.
Event History
Frequently Asked Questions
Who is realistically able to exploit this issue?
Systems running grav-plugin-api before 1.0.15 are affected when an attacker has the api.pages.write permission. The attacker can use the translate() endpoint to persist a page with process.twig enabled.
What access and conditions are required for exploitation?
Exploitation requires authenticated API access with api.pages.write permission; no user interaction is required. The attacker submits crafted header and content parameters, and the template payload is evaluated later when the persisted page is rendered.
What can be done if patching is not immediately possible?
Upgrade grav-plugin-api to version 1.0.15 or later. If upgrading cannot happen immediately, restrict or remove api.pages.write permission from untrusted accounts and review use of the translate() endpoint and pages with process.twig enabled.
How can I investigate whether exploitation may have occurred?
Review pages created or modified through the translate() endpoint, particularly those with process.twig enabled, and inspect their header and content parameters for crafted Twig template syntax. Rendering of such a page may trigger the injected payload.