What’s Vulnerable › Vulnerabilities

CVE-2026-45703: Pimcore: WordExport Authorization Bypass for Unauthorized Document Export

• Severity: medium (CVSS 6.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-17 · updated 2026-07-22
• Weakness: CWE-862

Description

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, the WordExport export flow in bundles/WordExportBundle/src/Controller/TranslationController.php only checks the word_export feature permission and directly resolves attacker-controlled type/id input without enforcing view permission on page, snippet, email, or object elements, allowing a low-privileged backend user to export document content the user is not allowed to view. This issue is fixed in versions 11.5.17 (LTS) and 12.3.7.

Affected products

• pimcore/pimcore: before 11.5.17; from 12.0.0, < 12.3.7

References

• https://github.com/pimcore/pimcore/releases/tag/v12.3.7
• https://github.com/pimcore/pimcore/security/advisories/GHSA-332x-r494-54fq
• https://github.com/pimcore/pimcore/security/advisories/GHSA-332x-r494-54fq

Get alerted when CVE-2026-45703 or the next vulnerability affects your stack