CVE-2026-54718

HIGH 7.2

Silverstripe Advanced Workflow: Remote code execution via advanced workflow email template

CVSS Score

7.2

EPSS Score

0.0%

EPSS Percentile

0th

Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an attacker with permission to author the advanced workflow email template can place a specially crafted server-side template payload in NotifyUsersWorkflowAction.EmailTemplate. When NotifyUsersWorkflowAction renders the field through the Silverstripe template engine SSTemplateParser, the payload can cause PHP evaluation and arbitrary code execution on the server; the regression coverage is in tests/php/WorkflowEngineTest.php. This issue is fixed in versions 6.4.5, 7.1.3, and 7.2.1.

CWE	CWE-1336
Vendor	silverstripe
Product	silverstripe-advancedworkflow
Published	Aug 27, 2026

Stay Ahead of the Next One

Get instant alerts for silverstripe silverstripe-advancedworkflow

Be the first to know when new high vulnerabilities affecting silverstripe silverstripe-advancedworkflow are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

silverstripe / silverstripe-advancedworkflow

< 6.4.5 >= 7.0.0, < 7.1.3 >= 7.2.0, < 7.2.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗