CVE-2026-124427

Craft CMS versions 5.0.0 before 5.11.2 are vulnerable to a GraphQL Schema Scope Bypass (CWE-862). This authorization bypass allows anonymous GraphQL clients to access out-of-scope section entries by utilizing the prev/next fields . By chaining