CVE-2026-74790

CVSS 9.3 (critical) · published 2026-08-16

Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hidden. Attackers can access filtered properties and fields by reusing a TemplateContext after tightening its MemberFilter, bypassing sandbox policies across requests or tenants.

Weakness: CWE-693

Source: NVD CVE-2026-74790

References

• https://github.com/scriban/scriban/security/advisories/GHSA-5wr9-m6jw-xx44
• https://www.vulncheck.com/advisories/scriban-before-memberfilter-bypass-via-templatecontext-cache
• https://github.com/scriban/scriban/security/advisories/GHSA-5wr9-m6jw-xx44

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.