Payloadcms Payload vulnerabilities

CVE-2026-105852 [HIGH] CWE-862 CVE-2026-105852: Payload is a free and open source headless content management system. In versions before 3.90.0 and Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, querying a readable collection with a relationship to another collection can expose information about related documents protected by access.read where constraints. This issue is fixed in versions 3.90.0 and 4.0.0

CVE-2026-34748 [HIGH] CWE-79 CVE-2026-34748: Payload is a free and open source headless content management system. Prior to version 3.78.0 in @pa Payload is a free and open source headless content management system. Prior to version 3.78.0 in @payloadcms/next, a stored Cross-Site Scripting (XSS) vulnerability existed in the admin panel. An authenticated user with write access to a collection could save content that, when viewed by another user, would execute in their browser. This issue has been

CVE-2026-106100 [HIGH] CWE-639 CVE-2026-106100: Payload is a free and open source headless content management system. In @payloadcms/db-mongodb vers Payload is a free and open source headless content management system. In @payloadcms/db-mongodb versions before 3.87.0 and canary versions before 4.0.0-canary.20, an authenticated user who can update a document can modify fields that field-level write access control does not permit that user to change. The Postgres and SQLite adapters are not affect

CVE-2026-105861 [HIGH] CWE-200 CVE-2026-105861: Payload is a free and open source headless content management system. In versions after 3.0.0 and be Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to an unintended recipient. This issue is fixed in versio

CVE-2026-105860 [HIGH] CWE-862 CVE-2026-105860: Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-te Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, the default tenant array field access allows an authenticated user to assign the user's own account to other tenants. Deployments that replace the default behavior with secured te

CVE-2026-105854 [HIGH] CWE-400 CVE-2026-105854: Payload is a free and open source headless content management system. In versions from 3.0.0 before Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a malformed multipart request body can cause multipart Content-Type processing to take an extremely long time, resulting in uncontrolled resource consumption. This issue is fixed in versions 3.90.0 and

CVE-2026-105855 [HIGH] CWE-284 CVE-2026-105855: Payload is a free and open source headless content management system. In versions before 3.90.0 and Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, the server fails to enforce a field-level access.update restriction on the password field of an authentication collection. This issue is fixed in versions 3.90.0 and 4.0.0-canary.34.

CVE-2026-105867 [MEDIUM] CWE-639 CVE-2026-105867: Payload is a free and open source headless content management system. In @payloadcms/storage-s3 vers Payload is a free and open source headless content management system. In @payloadcms/storage-s3 versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user can overwrite an existing S3 object belonging to another upload collection when client uploads are enabled for multiple collections sharing a bucket and useComposit

CVE-2026-105805 [MEDIUM] CWE-200 CVE-2026-105805: Payload is a free and open source headless content management system. In versions before 3.88.0 and Payload is a free and open source headless content management system. In versions before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query a readable collection, control its sorting, and select a protected field as the sort parameter can infer limited information about field values the user cannot read. This issue i

CVE-2026-105853 [MEDIUM] CWE-200 CVE-2026-105853: Payload is a free and open source headless content management system. In versions from 3.0.0 before Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, token refresh responses and password reset responses can independently return hidden or read-restricted fields that the requesting user cannot access. This issue is fixed in versions 3.90.0 and 4.0.0

CVE-2026-105847 [MEDIUM] CWE-200 CVE-2026-105847: Payload is a free and open source headless content management system. In versions from 3.0.0 before Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a user who can query a collection with a polymorphic join to sensitive fields can infer hidden or read-restricted values, including password-reset tokens, through polymorphic join filters. This issue

CVE-2023-30843 [MEDIUM] CWE-200 CVE-2023-30843: Payload is a free and open source headless content management system. In versions prior to 1.7.0, if Payload is a free and open source headless content management system. In versions prior to 1.7.0, if a user has access to documents that contain hidden fields or fields they do not have access to, the user could reverse-engineer those values via brute force. Version 1.7.0 contains a patch. As a workaround, write a `beforeOperation` hook to remove `w

CVE-2026-34750 [MEDIUM] CWE-22 CVE-2026-34750: Payload is a free and open source headless content management system. Prior to version 3.78.0 in @pa Payload is a free and open source headless content management system. Prior to version 3.78.0 in @payloadcms/storage-azure, @payloadcms/storage-gcs, @payloadcms/storage-r2, and @payloadcms/storage-s3, the client-upload signed-URL endpoints for S3, GCS, Azure, and R2 did not properly sanitize filenames. An attacker could craft filenames to escape the

CVE-2026-105868 [HIGH] CWE-434 CVE-2026-105868: Payload is a free and open source headless content management system. In versions before 3.90.0 and Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can store an XML file and stylesheet that execute JavaScript in the Payload origin when a logged-in user opens the file. This issue is fixed in versions 3.90.0 an

CVE-2025-4643 [MEDIUM] CWE-613 Payload does not invalidate JWTs after log out Payload does not invalidate JWTs after log out Payload uses JSON Web Tokens (JWT) for authentication. After log out JWT is not invalidated, which allows an attacker who has stolen or intercepted token to freely reuse it until expiration date (which is by default set to 2 hours, but can be changed). This issue has been fixed in version 3.44.0 of Payload.

CVE-2026-25574 [MEDIUM] CWE-639 CVE-2026-25574: Payload is a free and open source headless content management system. Prior to 3.74.0, a cross-colle Payload is a free and open source headless content management system. Prior to 3.74.0, a cross-collection Insecure Direct Object Reference (IDOR) vulnerability exists in the payload-preferences internal collection. In multi-auth collection environments using Postgres or SQLite with default serial/auto-increment IDs, authenticated users from one auth

CVE-2026-11779 [MEDIUM] CWE-307 Payload CMS default account-unlock access allows authenticated users to reset other accounts' lockouts Payload CMS default account-unlock access allows authenticated users to reset other accounts' lockouts An Improper Authorization vulnerability exists in PayloadCMS version 3.84.1 due to insufficient access control on the account unlock operation.

CVE-2026-105846 [MEDIUM] CWE-601 CVE-2026-105846: Payload is a free and open source headless content management system. In versions from 3.40.0 before Payload is a free and open source headless content management system. In versions from 3.40.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an attacker can craft a redirect URL parameter that sends a guest user to an untrusted destination after the authentication flow completes. This issue is fixed in versions 3.88.0 and 4.0.0-canary.2

CVE-2026-34749 [MEDIUM] CWE-352 CVE-2026-34749: Payload is a free and open source headless content management system. Prior to version 3.79.1, a Cro Payload is a free and open source headless content management system. Prior to version 3.79.1, a Cross-Site Request Forgery (CSRF) vulnerability exists in the authentication flow. Under certain conditions, the configured CSRF protection could be bypassed, allowing cross-site requests to be made. This issue has been patched in version 3.79.1.

CVE-2025-4644 [MEDIUM] CWE-384 Payload's SQLite adapter Session Fixation vulnerability Payload's SQLite adapter Session Fixation vulnerability A Session Fixation vulnerability existed in Payload's SQLite adapter due to identifier reuse during account creation. A malicious attacker could create a new account, save its JSON Web Token (JWT), and then delete the account, which did not invalidate the JWT. As a result, the next newly created user would receive the same identifier, allowing the attack