CVE-2026-55212

creationtimestamp| type| source ---|---|--- 2026-08-28 20:35:09+00:00| published-proof-of-concept| https://github.com/pimcore/pimcore/security/advisories/GHSA-f97c-ph8j-8vff...

CVE-2026-55212 Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation

Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, the Studio API class definition creation endpoint POST /pimcore-studio/api/class/definition/configuration-view/detail/create is guarded by the objects permission instead of the classes permission,...