Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-29001— TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization

Quick assessment

Affected
tastyigniter TastyIgniter
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

TastyIgniter 4.4.5 及更早版本存在 PHP 对象注入漏洞。已认证的管理员可通过提交一个序列化的 PHP 对象作为配置项值来触发该漏洞；该值未经过滤即被存储，并在后续通过 方法读取配置时执行反序列化。攻击者可利用管理设置表单（例如由 加载的 设置项）提交由 phpggc 等工具生成的序列化 gadget 链，从而以 PHP 应用进程用户的身份执行任意操作系统命令。该漏洞的影响将持续存在，直至该配置项的值被覆盖。

CVSS 7.2 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-29001

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization
Source: CVE Program / CVE List V5
Vulnerability Description
TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authenticated administrators to achieve arbitrary code execution by submitting a serialized PHP object as a settings value, which is stored unsanitized and later unserialized by getValueAttribute() when the setting is read. Attackers can submit a serialized gadget chain, such as one generated via phpggc, through the admin settings form (for example the maintenance_message setting loaded by CheckMaintenance.php) to achieve arbitrary operating-system command execution as the PHP application process user, with the impact persisting until the value is overwritten.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
可信数据的反序列化
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
tastyigniter TastyIgniter 0 ~ 4.4.5 -

II. Public POCs for CVE-2026-29001

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-29001

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-29001 (1)

Other References for CVE-2026-29001 (1)

IV. Related Vulnerabilities

Same product: TastyIgniter
Same vendor: tastyigniter
Same weakness: CWE-502

V. Comments for CVE-2026-29001

No comments yet

Leave a comment