CVE-2026-128048

The OpenMage magento-lts platform is vulnerable to an information disclosure flaw in versions before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 . The issue stems from the store.getConfig email template directive failing to properly validate encrypted-path checks against config.xml-declared path...