CVE-2026-125106

The Wagtail content management system (built on Django) is vulnerable to a privilege escalation issue where a CMS user with the submit translations permission can bypass edit restrictions. By calling the Admin API copy for translation action, an attacker can copy a source page they lack permissio...