Vulnerability · Published Jul 17, 2026 · Assigned by GitHub_M

CVE-2026-45703Pimcore: WordExport Authorization Bypass for Unauthorized Document Export

Medium 6.4

In plain English

A medium-severity missing authorization in pimcore from pimcore. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.4Medium

Exploit odds (30 days)0.3%top 75.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, the WordExport export flow in bundles/WordExportBundle/src/Controller/TranslationController.php only checks the word_export feature permission and directly resolves attacker-controlled type/id input without enforcing view permission on page, snippet, email, or object elements, allowing a low-privileged backend user to export document content the user is not allowed to view. This issue is fixed in versions 11.5.17 (LTS) and 12.3.7.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	pimcore/pimcore	12.3.7	GHSA-332x-r494-54fq
Packagist	pimcore/pimcore	11.5.17	GHSA-332x-r494-54fq
Packagist	pimcore/pimcore	2026.1.3	GHSA-332x-r494-54fq

Affected products (as reported)

Vendor	Product	Versions
pimcore	pimcore	< 11.5.17>= 12.0.0, < 12.3.7

Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L

References

https://github.com/pimcore/pimcore/security/advisories/GHSA-332x-r494-54fq x_refsource_CONFIRM
https://github.com/pimcore/pimcore/releases/tag/v12.3.7 x_refsource_MISC