Payloadcms Payload vulnerabilities

CVE-2026-25544 [CRITICAL] CWE-89 CVE-2026-25544: Payload is a free and open source headless content management system. Prior to 3.73.0, when querying Payload is a free and open source headless content management system. Prior to 3.73.0, when querying JSON or richText fields, user input was directly embedded into SQL without escaping, enabling blind SQL injection attacks. An unauthenticated attacker could extract sensitive data (emails, password reset tokens) and achieve full account takeover wit

CVE-2026-105844 [CRITICAL] CWE-1321 CVE-2026-105844: Payload is a free and open source headless content management system. In versions from 3.0.0 before Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugin-import-export is enabled, causing unintended application behavior that can lead to remote code execution.

CVE-2026-105857 [CRITICAL] CWE-94 CVE-2026-105857: Payload is a free and open source headless content management system. In @payloadcms/plugin-form-bui Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can craft a form submission that executes code remotely on the server. This issue is fixed in versions 3.90.0 and 4.0.0-canary.34.

CVE-2026-34751 [CRITICAL] CWE-472 CVE-2026-34751: Payload is a free and open source headless content management system. Prior to version 3.79.1 in @pa Payload is a free and open source headless content management system. Prior to version 3.79.1 in @payloadcms/graphql and payload, a vulnerability in the password recovery flow could allow an unauthenticated attacker to perform actions on behalf of a user who initiates a password reset. This issue has been patched in version 3.79.1 for @payloadcms/

CVE-2026-105859 [CRITICAL] CWE-639 CVE-2026-105859: Payload is a free and open source headless content management system. In versions before 3.90.0 and Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents without enforcing collection or field-level access control when orderable is enabled on a collection or join f

CVE-2026-105845 [CRITICAL] CWE-89 CVE-2026-105845: Payload is a free and open source headless content management system. In versions from 3.0.0 before Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query readable collections through dynamic filters or joins can submit a request that causes SQL injection in the SQLite and Postgres adapters. This issue is fixed in versi

CVE-2022-27952 [CRITICAL] CWE-434 CVE-2022-27952: An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attack An arbitrary file upload vulnerability in the file upload module of PayloadCMS v0.15.0 allows attackers to execute arbitrary code via a crafted SVG file.

CVE-2026-105863 [CRITICAL] CWE-290 CVE-2026-105863: Payload is a free and open source headless content management system. In versions after 3.0.0 and be Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that maps a field to a reserved authentication claim name can place unintended values in the authentication token issued at login. This issue is fixed in version 3.90.0.

CVE-2026-105806 [HIGH] CWE-862 CVE-2026-105806: Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp vers Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 until 3.88.0, an authenticated user can manage MCP API keys outside the intended account, enabling privilege escalation through account takeover. This issue is fixed in version 3.88.0.

CVE-2026-105848 [CRITICAL] CWE-749 CVE-2026-105848: Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe v Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can reach the enabled optional Stripe REST proxy can perform unintended Stripe operations. This issue is fixed in versions 3.90.0 and 4.0.0-canary.34.

CVE-2026-105856 [HIGH] CWE-89 CVE-2026-105856: Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-cana Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operators. Collections without those fields are not affected, a

CVE-2026-105858 [HIGH] CWE-94 CVE-2026-105858: Payload is a free and open source headless content management system. In versions before 3.90.0 and Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a crafted request to the public first-register operation can execute code remotely when local authentication is enabled and no initial user has been created. This issue is fixed in versions 3.90.0 and 4.0.0-canary

CVE-2026-34746 [HIGH] CWE-918 CVE-2026-34746: Payload is a free and open source headless content management system. Prior to version 3.79.1, an au Payload is a free and open source headless content management system. Prior to version 3.79.1, an authenticated Server-Side Request Forgery (SSRF) vulnerability exists in the upload functionality. Authenticated users with create or update access to an upload-enabled collection could cause the server to make outbound HTTP requests to arbitrary URLs. Th

CVE-2026-105849 [HIGH] CWE-201 CVE-2026-105849: Payload is a free and open source headless content management system. In versions from 3.0.0 before Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, users with ordinary read access to other authentication documents in a collection with useAPIKey enabled can obtain active API keys and exercise the target accounts' permissions until those keys are ro

CVE-2026-105865 [HIGH] CWE-22 CVE-2026-105865: Payload is a free and open source headless content management system. In versions before 3.90.0 and Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can update or delete uploads stored locally can cause file cleanup to remove unintended files outside the configured upload directory, resulting in data loss or service disruption. Deploy

CVE-2026-105851 [HIGH] CWE-284 CVE-2026-105851: Payload is a free and open source headless content management system. In versions from 3.0.0 before Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, the duplicate operation copies values from a source document even when a field is hidden or its access.read or access.create rule rejects that value for the caller. The disableDuplicate setting does no

CVE-2026-34747 [HIGH] CWE-89 CVE-2026-34747: Payload is a free and open source headless content management system. Prior to version 3.79.1, certa Payload is a free and open source headless content management system. Prior to version 3.79.1, certain request inputs were not properly validated. An attacker could craft requests that influence SQL query execution, potentially exposing or modifying data in collections. This issue has been patched in version 3.79.1.

CVE-2026-105862 [HIGH] CWE-79 CVE-2026-105862: Payload is a free and open source headless content management system. In versions before 3.90.0 and Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a collection that allows downloadable SVG uploads can store a malicious SVG that bypasses sanitization and executes attacker-controlled JavaScript when a user downloads and opens the SVG. This issue is fixed in ve

CVE-2026-105850 [HIGH] CWE-837 CVE-2026-105850: Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerc Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, use of the Stripe payment adapter can allow a Stripe order confirmation to be processed more than once under certain conditions. This issue is fixed in versions 3.90.0 and 4.0.0-cana

CVE-2026-105866 [HIGH] CWE-307 CVE-2026-105866: Payload is a free and open source headless content management system. In versions before 3.90.0 and Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an account email address or username can abuse the account lockout mechanism of a local-authentication collection to prevent that account from signing in. This issue is fixed