CVE-2026-46638— Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-46638
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)
Source: CVE Program / CVE List V5
Vulnerability Description
Twig is a template language for PHP. Prior to 3.26.0, {% sandbox %}{% include %} can include a template that was previously loaded outside the sandbox without re-invoking checkSecurity(), allowing the cached template to use tags, filters, and functions that should have been denied by SecurityPolicy::checkSecurity(). This issue is fixed in version 3.26.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
保护机制失效
Source: CVE Program / CVE List V5
Vulnerability Title
twigphp Twig 处理逻辑错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
twigphp Twig是twigphp的PHP模板引擎。 twigphp Twig 3.26.0之前版本存在处理逻辑错误漏洞，该漏洞源于在沙盒模式下，{% include %}可以包含之前已在沙盒外加载的模板，而无需重新调用checkSecurity()，导致缓存的模板可以使用本应被SecurityPolicy::checkSecurity()拒绝的标签、过滤器和函数。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-46638
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-46638
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-46638 (1)
Vendor Advisories for CVE-2026-46638 (1)
Vendor Pages for CVE-2026-46638 (1)
Same Patch Batch · twigphp · 2026-07-14 · 17 CVEs total
| CVE-2026-46634 | 7.7 HIGH | Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized templ |
| CVE-2026-47730 | Twig: XSS in profiler HtmlDumper via unescaped template and profile names | |
| CVE-2026-47732 | Twig Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points | |
| CVE-2026-48806 | Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys | |
| CVE-2026-48805 | Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php` | |
| CVE-2026-48808 | Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterfa | |
| CVE-2026-48807 | Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filte | |
| CVE-2026-49981 | Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes betwee | |
| CVE-2026-46635 | Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects) | |
| CVE-2026-46628 | Twig: The `spaceless` filter implicitly marks its output as safe | |
| CVE-2026-46640 | Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation | |
| CVE-2026-46637 | Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']` | |
| CVE-2026-46639 | Twig: Sandbox property and method bypass via object-destructuring assignment | |
| CVE-2026-46627 | Twig: Sandbox resource exhaustion via unbounded `for` / `range()` | |
| CVE-2026-46633 | Twig: PHP code injection via `{% use %}` template name | |
| CVE-2026-46629 | Twig: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled argu |
IV. Related Vulnerabilities
Same product: Twig
- CVE-2026-48807
Twig: Sandbox `__toString()` policy bypass via `Traversable` - CVE-2026-48806
Twig: Sandbox `__toString()` policy bypass via dynamic mappi - CVE-2026-48808
Twig: Sandbox property allowlist bypass via the `column` fil - CVE-2026-48805
Twig: Sandbox state regression in deprecated internal wrappe - CVE-2026-49981
Twig: Sandbox filter, tag and function allow-list bypass whe
Same vendor: twigphp
- CVE-2026-48807
Twig: Sandbox `__toString()` policy bypass via `Traversable` - CVE-2026-48806
Twig: Sandbox `__toString()` policy bypass via dynamic mappi - CVE-2026-48808
Twig: Sandbox property allowlist bypass via the `column` fil - CVE-2026-48805
Twig: Sandbox state regression in deprecated internal wrappe - CVE-2026-49981
Twig: Sandbox filter, tag and function allow-list bypass whe
Same weakness: CWE-693
- CVE-2026-48037
Hulumi: AccountFoundation reuse paths silently downgrade Gua - CVE-2026-48033
Hulumi: Policy packs bypassed by a forged Pulumi-URN logical - CVE-2026-65899
DOMPurify before 3.4.9 Trusted Types Policy State Contaminat - CVE-2026-46403
Klever-Go KVM read-only execution can commit contract delete - CVE-2026-56585
HCL IEM was affected with the Anti Clickjacking XFrame Optio
V. Comments for CVE-2026-46638
No comments yet