Medium severity6.5GHSA Advisory· Published May 11, 2026· Updated May 12, 2026

CVE-2026-44197

Description

Wagtail is an open source content management system built on Django. Prior to 7.0.7, 7.3.2, and 7.4, a CMS user without the ability to edit a page could access revisions of the page through the revision compare view if they knew the primary key of two revisions. This could potentially result in disclosure of sensitive information. This vulnerability is fixed in 7.0.7, 7.3.2, and 7.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
wagtailPyPI	< 7.0.7	7.0.7
wagtailPyPI	>= 7.1, < 7.3.2	7.3.2

Affected products

Wagtail/WagtailGHSA
Range: >= 7.1, < 7.3.2
ghsa-coords
pkg:pypi/wagtail
Range: < 7.0.7

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-c6wj-9vcj-75pjghsaADVISORY
github.com/wagtail/wagtail/security/advisories/GHSA-c6wj-9vcj-75pjnvdVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2026-44197ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/wagtail/PYSEC-2026-146.yamlghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000