CVE-2026-44198 — Wagtail: Improper permission handling when viewing page history
Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could still access the history…
Published: 2026-05-11 · CVSS: 4.3 · CVSS 3.1
Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could still access the history report for the page, potentially resulting in disclosure of sensitive information. This vulnerability is fixed in 7.0.7, 7.3.2, and 7.4.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7