medium4.3
CVE-2026-44198
Wagtail is an open source content management system built on Django.
Impact
Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could still access the history report for the page, potentially resulting in disclosure of sensitive information. This vulnerability is fixed in 7.0.7, 7.3.2, and 7.4.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | wagtail | < 7.0.7 | 7.0.7 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Torchbox | Wagtail | before 7.0.7 from 7.1 before 7.3.2 |