tinacms vulnerabilities

Products

• tinacms 16
• @tinacms/cli 9
• graphql 5
• @tinacms/mdx 2
• app 2
• next-tinacms-azure 2
• @tinacms/app 1
• @tinacms/mdx 1
• auth 1
• next-tinacms-cloudinary 1
• next-tinacms-dos 1
• next-tinacms-s3 1
• web-components 1

Latest tinacms CVEs

Newest publication first

1. CVE-2026-126774 @tinacms/mdx before 2.4.2 Code Injection via MDX Serializer Rich-Text Values

   Published 2026-11-11

   High·CVSS 8.8 EPSS 0.37%

   @tinacms/mdx before 2.4.2 contains a code injection vulnerability in its MDX serializer, which writes rich-text values into MDX expressions without escaping them. Authenticated content editors can save crafted values that break out of list field or highlightColor expressions in t...

2. CVE-2026-108261 TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment

   Published 2026-10-09

   Critical·CVSS 9.3 EPSS 0.20%

   Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the /~/* admin preview route in packages/tinacms/src/admin/index.tsx can turn an attacker-controlled hash-router splat into an off-origin iframe URL through packages/@tinacms/app/src/pr...

3. CVE-2026-108260 @tinacms/web-components: `tina-markdown` writes rich-text link URLs into `href` without scheme validation, allowing stored XSS

   Published 2026-10-09

   High·CVSS 7.6 EPSS 0.25%

   Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packages/@tinacms/web-components/src/tina-markdown.js assigns a rich-text node.url value directly to an anchor href without validating the URL scheme. A content author can store a link usin...

4. CVE-2026-108259 Tina: Code injection via unescaped Git branch name in generated client source

   Published 2026-10-09

   High·CVSS 8.2 EPSS 0.33%

   Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCEL_GIT_COMMIT_REF, GITHUB_BRANCH, or HEAD, incorporates the raw value into the API URL, and interpolates that URL into JavaScript string literals in packages/@tinacms/cli/s...

5. CVE-2026-63506 Tina: [Broken Access Control] letting any TinaCloud user authorize against any self-hosted site

   Published 2026-09-16

   High·CVSS 8.8 EPSS 0.52%

   Tina is a headless content management system. Prior to @tinacms/auth 1.1.4 and next-tinacms-azure 15.0.1, isAuthorized accepts a request-controlled clientID and asks isUserAuthorized to validate the bearer token against that selected TinaCloud app instead of the self-hosted site'...

6. CVE-2026-63123 Tina: Cross-origin `POST /media/upload/*` requests can write arbitrary files into the Tina dev server media root

   Published 2026-08-19

   Medium·CVSS 6.5 EPSS 0.26%

   Tina is a headless content management system. Prior to 2.5.2, the TinaCMS CLI package's Vite dev server packages/@tinacms/cli/src/next/vite/cors.ts origin callback returns false for a disallowed origin but does not reject the request, and packages/@tinacms/cli/src/next/vite/plugi...

7. CVE-2026-59992 Tina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)

   Published 2026-08-19

   Medium·CVSS 5.4 EPSS 0.38%

   Tina is a headless content management system. Prior to next-tinacms-s3 23.0.4, next-tinacms-dos 23.0.4, next-tinacms-azure 14.0.4, and next-tinacms-cloudinary 26.0.4, the first-party production media adapters pass attacker-controlled object keys to storage SDK upload and delete o...

8. CVE-2026-55660 TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover

   Published 2026-07-01

   High·CVSS 7.6 EPSS 0.28%

   Tina is a headless content management system. In versions prior to @tinacms/app 2.5.6 and tinacms 3.9.3, cross-origin postMessage handlers and a rich-text URL-sanitization bypass enable stored XSS and session takeover. The library registers window message listeners — the useTina...

9. CVE-2026-54074 @tinacms/cli: Remote Code Execution via Forestry migration — unsanitised __TINA_INTERNAL__ marker in user-controlled YAML labels

   Published 2026-07-01

   High·CVSS 7.8 EPSS 0.25%

   Tina is a headless content management system. @tinacms/cli versions prior to 2.4.3 contain a Remote Code Execution vulnerability in the Forestry-to-Tina migration command. The internal helper addVariablesToCode unquotes any value matching the marker "TINA_INTERNAL:::(.?):::" insi...

10. CVE-2026-55661 TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes

    Published 2026-07-01

    Medium·CVSS 4.8 EPSS 0.40%

    Tina is a headless content management system. In versions prior to @tinacms/mdx 2.1.7 and tinacms 3.9.3, rich-text parsing and the default link/image renderers did not sanitize the url field on Slate link/image nodes. Content containing javascript: or data:text/html URLs — includ...

11. CVE-2026-34603 @tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions

    Published 2026-04-01

    High·CVSS 8.3 EPSS 0.42%

    Tina is a headless content management system. Prior to version 2.2.2, @tinacms/cli recently added lexical path-traversal checks to the dev media routes, but the implementation still validates only the path string and does not resolve symlink or junction targets. If a link already...

12. CVE-2026-34604 @tinacms/graphql's `FilesystemBridge` Path Validation Can Be Bypassed via Symlinks or Junctions

    Published 2026-04-01

    High·CVSS 8.8 EPSS 0.38%

    Tina is a headless content management system. Prior to version 2.2.2, @tinacms/graphql uses string-based path containment checks in FilesystemBridge. That blocks plain ../ traversal, but it does not resolve symlink or junction targets. If a symlink/junction already exists under t...

13. CVE-2026-33949 @tinacms/graphql has Path Traversal that leads to overwrite of arbitrary files

    Published 2026-04-01

    High·CVSS 8.1 EPSS 0.39%

    Tina is a headless content management system. Prior to version 2.2.2, a path traversal vulnerability in @tinacms/graphql allows unauthenticated users to write and overwrite arbitrary files within the project root. This is achieved by manipulating the relativePath parameter in Gra...

14. CVE-2026-29066 Arbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLI

    Published 2026-03-12

    Medium·CVSS 6.2 EPSS 1.1%

    Tina is a headless content management system. Prior to 2.1.8, the TinaCMS CLI dev server configures Vite with server.fs.strict: false, which disables Vite's built-in filesystem access restriction. This allows any unauthenticated attacker who can reach the dev server to read arbit...

15. CVE-2026-28791 Path Traversal in Media Upload Handle in Tina

    Published 2026-03-12

    High·CVSS 7.4 EPSS 0.38%

    Tina is a headless content management system. Prior to 2.1.7, a path traversal vulnerability exists in the TinaCMS development server's media upload handler. The code at media.ts joins user-controlled path segments using path.join() without validating that the resulting path stay...

16. CVE-2026-28793 Path Traversal Leading to Arbitrary File Read, Write and Delete in TinaCMS

    Published 2026-03-12

    High·CVSS 8.4 EPSS 0.24%

    Tina is a headless content management system. Prior to 2.1.8, the TinaCMS CLI development server exposes media endpoints that are vulnerable to path traversal, allowing attackers to read and write arbitrary files on the filesystem outside the intended media directory. When runnin...

17. CVE-2026-28792 Cross-Origin File Exfiltration via CORS Misconfiguration + Path Traversal in TinaCMS

    Published 2026-03-12

    Critical·CVSS 9.7 EPSS 0.64%

    Tina is a headless content management system. Prior to 2.1.8 , the TinaCMS CLI dev server combines a permissive CORS configuration (Access-Control-Allow-Origin: *) with the path traversal vulnerability (previously reported) to enable a browser-based drive-by attack. A remote atta...

18. CVE-2026-24125 Path Traversal in @tinacms/graphql

    Published 2026-03-12

    Medium·CVSS 6.3 EPSS 0.50%

    Tina is a headless content management system. Prior to 2.1.2, TinaCMS allows users to create, update, and delete content documents using relative file paths (relativePath, newRelativePath) via GraphQL mutations. Under certain conditions, these paths are combined with the collecti...

19. CVE-2025-68278 tinacms vulnerable to arbitrary code execution

    Published 2025-12-18

    High·CVSS 7.3 EPSS 0.48%

    Tina is a headless content management system. In tinacms prior to version 3.1.1, tinacms uses the gray-matter package in an insecure way allowing attackers that can control the content of the processed markdown files, e.g., blog posts, to execute arbitrary code. tinacms version 3...

20. CVE-2024-45391 Tina search token leak via lock file in TinaCMS

    Published 2024-09-03

    High·CVSS 7.5 EPSS 0.31%

    Tina is an open-source content management system (CMS). Sites building with Tina CMS's command line interface (CLI) prior to version 1.6.2 that use a search token may be vulnerable to the search token being leaked via lock file (tina-lock.json). Administrators of Tina-enabled web...

21. CVE-2023-25164 Sensitive Information leak via Script File in TinaCMS

    Published 2023-02-08

    High·CVSS 7.5 EPSS 0.68%

    Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tinacms/cli >= 1.0.0 && < 1.0.9 which store sensitive values in the process.env variable are impacted. These values will be added in plaintext to the index.js file....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.