EUVD-2026-93513

Payload: Client uploads could overwrite S3 objects...

Authorization Bypass Through User-Controlled Key

Overview @payloadcms/storage-s3 is a Payload storage adapter for Amazon S3 Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the S3 client-side direct upload flow in S3ClientUploadHandler.ts, where signed PUT URLs are generated without an...

PT-2026-106800

Name of the Vulnerable Software and Affected Versions @payloadcms/storage-s3 versions prior to 3.90.0 @payloadcms/storage-s3 canary versions prior to 4.0.0-canary.34 Description An authenticated user can overwrite an existing S3 object belonging to another upload collection. This occurs when clie...