CVE-2026-125105— Wagtail: Identification of documents by SHA1 hash

Quick assessment

Affected

wagtail wagtail

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Wagtail 是一个基于 Django 构建的开源内容管理系统。在 7.0.9、7.3.4、7.4.3 和 8.0rc2 之前的版本中，Wagtail 在文档权限检查和文件名验证完成之前，就对文档服务接口应用了 ETag 条件请求处理。若攻击者未进行身份认证，但已知某个文档 ID 及一个候选 SHA1 哈希值，则可通过提交 If-Match 或 If-None-Match 请求头，根据响应差异判断该哈希值是否存在于文档库中。此漏洞不会泄露文档内容、文件名、其他元数据，也不会暴露攻击者原本未知的哈希信息。该问题已在

CVSS 3.7 · Low Updated Nov 10, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Wagtail: Identification of documents by SHA1 hash

Source: CVE Program / CVE List V5

Vulnerability Description

Wagtail is an open source content management system built on Django. Prior to 7.0.9, 7.3.4, 7.4.3, and 8.0rc2, Wagtail applies ETag conditional request processing to the document serve endpoint before document permission and filename checks complete. An unauthenticated attacker who knows a document ID and a candidate SHA1 hash can submit If-Match or If-None-Match and distinguish the response, revealing whether that hash is present in the document library. The issue does not expose document contents, filenames, other metadata, or information about hashes the attacker does not already know. This issue is fixed in versions 7.0.9, 7.3.4, 7.4.3, and 8.0rc2.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

不充分权限或特权的处理不恰当

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
wagtail	wagtail	< 7.0.9	-

II. Public POCs for CVE-2026-125105

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-125105

请登录查看更多情报信息。

Other References for CVE-2026-125105 (9)

https://github.com/wagtail/wagtail/releases/tag/v7.4.3 x_refsource_MISC
https://github.com/wagtail/wagtail/releases/tag/v7.0.9 x_refsource_MISC
https://github.com/wagtail/wagtail/releases/tag/v7.3.4 x_refsource_MISC
https://github.com/wagtail/wagtail/releases/tag/v8.0rc2 x_refsource_MISC
https://github.com/wagtail/wagtail/security/advisories/GHSA-92hv-j533-69wc x_refsource_CONFIRM
https://github.com/wagtail/wagtail/commit/2db8a92ab888467bdd008b8e098c3d94d7da25f3 x_refsource_MISC
https://github.com/wagtail/wagtail/commit/f05649908fb727035108194792fb5e4f9bb6c1b8 x_refsource_MISC
https://github.com/wagtail/wagtail/commit/a1402376889be87cfc413cf9f2694a547d2b77c7 x_refsource_MISC
https://github.com/wagtail/wagtail/commit/c4c38746855a562f451838fbfe0c77dab2c61829 x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2026-125105

Same Patch Batch · wagtail · 2026-11-09 · 4 CVEs total

CVE-2026-125106	6.5 MEDIUM	Wagtail: Improper restriction handling on Page translation API endpoint
CVE-2026-123819	6.5 MEDIUM	Wagtail: Improper permission handling when copying snippets
CVE-2026-123820	5.3 MEDIUM	Wagtail: Improper restriction handling on descendant collections in Documents and Images A

IV. Related Vulnerabilities

Same product: wagtail

Same vendor: wagtail

Same weakness: CWE-280