CVE-2026-46639— Twig: Sandbox property and method bypass via object-destructuring assignment
Possible ATT&CK Techniques 1AI
T1210 · Exploitation of Remote ServicesGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-46639
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Twig: Sandbox property and method bypass via object-destructuring assignment
Source: CVE Program / CVE List V5
Vulnerability Description
Twig is a template language for PHP. From 3.24.0 until 3.26.0, object-destructuring assignment compiles CoreExtension::getAttribute() with the sandbox argument hardcoded to false, disabling property and method policy checks and allowing an attacker with write access to a sandboxed Twig template to read public properties or invoke public getters on objects passed to the template engine. This issue is fixed in version 3.26.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
保护机制失效
Source: CVE Program / CVE List V5
Vulnerability Title
twigphp Twig 处理逻辑错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
twigphp Twig是twigphp的PHP模板引擎。 twigphp Twig 3.24.0版本至3.26.0之前版本存在处理逻辑错误漏洞，该漏洞源于对象解构赋值将sandbox参数硬编码为false，导致属性和方法策略检查被禁用，使得具有写入权限的攻击者能够读取传递给模板引擎的对象的公共属性或调用公共getter方法。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-46639
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-46639
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-46639 (1)
Vendor Pages for CVE-2026-46639 (1)
Same Patch Batch · twigphp · 2026-07-14 · 17 CVEs total
| CVE-2026-46634 | 7.7 HIGH | Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized templ |
| CVE-2026-47730 | Twig: XSS in profiler HtmlDumper via unescaped template and profile names | |
| CVE-2026-47732 | Twig Sandbox: multiple `__toString()` policy bypasses via unguarded string coercion points | |
| CVE-2026-48806 | Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys | |
| CVE-2026-48805 | Twig: Sandbox state regression in deprecated internal wrappers in `src/Resources/core.php` | |
| CVE-2026-48808 | Twig: Sandbox property allowlist bypass via the `column` filter under `SourcePolicyInterfa | |
| CVE-2026-48807 | Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `replace` filte | |
| CVE-2026-49981 | Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes betwee | |
| CVE-2026-46635 | Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects) | |
| CVE-2026-46638 | Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete f | |
| CVE-2026-46628 | Twig: The `spaceless` filter implicitly marks its output as safe | |
| CVE-2026-46640 | Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation | |
| CVE-2026-46637 | Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']` | |
| CVE-2026-46627 | Twig: Sandbox resource exhaustion via unbounded `for` / `range()` | |
| CVE-2026-46633 | Twig: PHP code injection via `{% use %}` template name | |
| CVE-2026-46629 | Twig: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled argu |
IV. Related Vulnerabilities
Same product: Twig
- CVE-2026-48807
Twig: Sandbox `__toString()` policy bypass via `Traversable` - CVE-2026-48806
Twig: Sandbox `__toString()` policy bypass via dynamic mappi - CVE-2026-48808
Twig: Sandbox property allowlist bypass via the `column` fil - CVE-2026-48805
Twig: Sandbox state regression in deprecated internal wrappe - CVE-2026-49981
Twig: Sandbox filter, tag and function allow-list bypass whe
Same vendor: twigphp
- CVE-2026-48807
Twig: Sandbox `__toString()` policy bypass via `Traversable` - CVE-2026-48806
Twig: Sandbox `__toString()` policy bypass via dynamic mappi - CVE-2026-48808
Twig: Sandbox property allowlist bypass via the `column` fil - CVE-2026-48805
Twig: Sandbox state regression in deprecated internal wrappe - CVE-2026-49981
Twig: Sandbox filter, tag and function allow-list bypass whe
Same weakness: CWE-693
- CVE-2026-48037
Hulumi: AccountFoundation reuse paths silently downgrade Gua - CVE-2026-48033
Hulumi: Policy packs bypassed by a forged Pulumi-URN logical - CVE-2026-65899
DOMPurify before 3.4.9 Trusted Types Policy State Contaminat - CVE-2026-46403
Klever-Go KVM read-only execution can commit contract delete - CVE-2026-56585
HCL IEM was affected with the Anti Clickjacking XFrame Optio
V. Comments for CVE-2026-46639
No comments yet