AIKIDO-2026-884281
statamic/cms is vulnerable to Unsafe Reflection
81
High Risk
This Affects:
statamic/cmsTL;DR
Statamic resolves variable paths in Antlers templates without fully restricting which object methods can be invoked. When user input is added into an affected template area, it can trigger method calls on objects exposed to the template. This could expose sensitive account data, let an unauthenticated visitor take over an account, or allow content to be modified or destroyed. The fix tightens Antlers variable path resolution and the get modifier and consistently applies the setting that corrects this behavior.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your site has Antlers templates that incorporate user input into affected template areas.
Background info
statamic/cms is vulnerable to Unsafe Reflection in versions 0.0.1 - 5.74.3 and 6.0.0 - 6.27.1.
How to fix this
Upgrade the statamic/cms library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant