Skip to content

Craft CMS Vulnerable to Authenticated RCE via "craft.app.fs.write()" in Twig Templates

Critical severity GitHub Reviewed Published Mar 2, 2026 in craftcms/cms • Updated Mar 4, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts