CVE-2026-49981— Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`
Possible ATT&CK Techniques 1AI
T1055 · Process InjectionGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-49981
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`
Source: CVE Program / CVE List V5
Vulnerability Description
Twig is a template language for PHP. Prior to 3.27.0, the per-template filter, tag, and function allow-list verdict is computed when a Template instance is constructed and can remain cached after sandbox state changes between renders, allowing a later sandboxed render to reuse a template that was originally checked with a different or empty policy. This issue is fixed in version 3.27.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
保护机制失效
Source: CVE Program / CVE List V5
Vulnerability Title
twigphp Twig 处理逻辑错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
twigphp Twig是twigphp的PHP模板引擎。 twigphp Twig 3.27.0之前版本存在安全漏洞，该漏洞源于沙箱状态变化后过滤、标签和函数允许列表判断缓存未更新，允许后续沙箱渲染复用不同策略检查的模板，可能导致权限绕过。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-49981
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-49981
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-49981 (1)
Vendor Advisories for CVE-2026-49981 (1)
Vendor Pages for CVE-2026-49981 (1)
Same Patch Batch · twigphp · 2026-07-14 · 17 CVEs total
| CVE-2026-46634 | 7.7 HIGH | Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized templ |
| CVE-2026-47730 | Twig: XSS in profiler HtmlDumper via unescaped template and profile names | |
| CVE-2026-47732 | Twig Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points | |
| CVE-2026-48806 | Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys | |
| CVE-2026-48805 | Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php` | |
| CVE-2026-48808 | Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterfa | |
| CVE-2026-48807 | Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filte | |
| CVE-2026-46635 | Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects) | |
| CVE-2026-46638 | Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete f | |
| CVE-2026-46628 | Twig: The `spaceless` filter implicitly marks its output as safe | |
| CVE-2026-46640 | Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation | |
| CVE-2026-46637 | Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']` | |
| CVE-2026-46639 | Twig: Sandbox property and method bypass via object-destructuring assignment | |
| CVE-2026-46627 | Twig: Sandbox resource exhaustion via unbounded `for` / `range()` | |
| CVE-2026-46633 | Twig: PHP code injection via `{% use %}` template name | |
| CVE-2026-46629 | Twig: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled argu |
IV. Related Vulnerabilities
Same product: Twig
- CVE-2026-48807
Twig: Sandbox `__toString()` policy bypass via `Traversable` - CVE-2026-48806
Twig: Sandbox `__toString()` policy bypass via dynamic mappi - CVE-2026-48808
Twig: Sandbox property allowlist bypass via the `column` fil - CVE-2026-48805
Twig: Sandbox state regression in deprecated internal wrappe - CVE-2026-46637
Twig: HTML-output filters in twig/* extras incorrectly decla
Same vendor: twigphp
- CVE-2026-48807
Twig: Sandbox `__toString()` policy bypass via `Traversable` - CVE-2026-48806
Twig: Sandbox `__toString()` policy bypass via dynamic mappi - CVE-2026-48808
Twig: Sandbox property allowlist bypass via the `column` fil - CVE-2026-48805
Twig: Sandbox state regression in deprecated internal wrappe - CVE-2026-46637
Twig: HTML-output filters in twig/* extras incorrectly decla
Same weakness: CWE-693
- CVE-2026-76827
Search-indexer: search-indexer: update/delete operations not - CVE-2026-47686
vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Es - CVE-2026-74896
openssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attri - CVE-2026-74895
openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Proce - CVE-2026-74883
openssl_encrypt before 1.4.0 Sandbox Bypass via pathlib and
V. Comments for CVE-2026-49981
No comments yet