Wagtail has permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet`

🗓️ 07 Jul 2026 11:45:40Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 3 Views

Wagtail permits field permission bypass when editing models via settings or model viewset POST.

Reporter	Title	Published	Views	Family All 14
CNNVD	Wagtail 安全漏洞	2 May 202400:00	–	cnnvd
CVE	CVE-2024-32882	2 May 202406:52	–	cve
Cvelist	CVE-2024-32882 Permission check bypass when editing a model with per-field restrictions in wagtail	2 May 202406:52	–	cvelist
EUVD	EUVD-2024-1820	3 Oct 202520:07	–	euvd
Github Security Blog	Wagtail has permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet`	1 May 202416:35	–	github
NVD	CVE-2024-32882	2 May 202407:15	–	nvd
OSV	CVE-2024-32882 Permission check bypass when editing a model with per-field restrictions in wagtail	2 May 202406:52	–	osv
OSV	GHSA-W2V8-PHP4-P8HC Wagtail has permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet`	1 May 202416:35	–	osv
OSV	PYSEC-2026-2031 Wagtail has permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet`	7 Jul 202611:45	–	osv
Positive Technologies	PT-2024-24938	1 May 202400:00	–	ptsecurity

Vulners

Node

pypi wagtailRange6.0.0–6.0.3

Source	Link
github	www.github.com/wagtail/wagtail/security/advisories/GHSA-w2v8-php4-p8hc
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-32882
github	www.github.com/wagtail/wagtail/commit/ab2a5d82b4ee3c909d2456704388ccf90e367c9b
github	www.github.com/wagtail/wagtail/commit/fa0d4829f9c81eefb37cc058e2fa1b6a918741da
docs	www.docs.wagtail.org/en/stable/extending/generic_views.html
docs	www.docs.wagtail.org/en/stable/reference/contrib/settings.html
docs	www.docs.wagtail.org/en/stable/reference/pages/panels.html
github	www.github.com/wagtail/wagtail
github	www.github.com/wagtail/wagtail/releases/tag/v6.0.3
pypi	www.pypi.org/project/wagtail

07 Jul 2026 17:25Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.12.7

EPSS0.00479

SSVC