CVE-2026-118248
Highcharts Dashboards: editableOptions.propertyPath writes to Object.prototype
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Highcharts JS is a JavaScript charting library based on SVG. From 1.0.0 until 4.2.2, Highcharts Dashboards edit mode walks editableOptions propertyPath segments without rejecting prototype-related keys. An attacker who controls editableOptions can provide a path through __proto__ or constructor, and a user's edit writes the configured value onto Object.prototype. The property then becomes visible to JavaScript throughout the page, with consequences determined by the consuming application. This issue is fixed in 4.2.2.
| CWE | CWE-1321 |
| Vendor | highcharts |
| Product | highcharts |
| Published | Oct 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for highcharts highcharts
Be the first to know when new unknown vulnerabilities affecting highcharts highcharts are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
highcharts / highcharts
< 13.1.0
@highcharts / dashboards
>= 1.0.0, < 4.2.2