### Problem Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about records and files they were not authorized to view. ### Solution Update to TYPO3 versions 10.4.57 ELTS, 11.5.51 ELTS, 12.4.46 ELTS, 13.4.31 LTS, 14.3.3 LTS that fix the problem described. ### Credits TYPO3 CMS thanks Vincent Yang for reporting this issue, and to TYPO3 security team member Elias Häußler for fixing it. ### Resources * [TYPO3-CORE-SA-2026-014](https://typo3.org/security/advisory/typo3-core-sa-2026-014)
Update typo3/cms-backend to 10.4.57; typo3/cms-backend to 11.5.51; typo3/cms-backend to 12.4.46; typo3/cms-backend to 13.4.31; typo3/cms-backend to 14.3.3; typo3/cms-core to 10.4.57; typo3/cms-core to 11.5.51; typo3/cms-core to 12.4.46; typo3/cms-core to 13.4.31; typo3/cms-core to 14.3.3 if you use the affected versions. Test the change in a non-production environment first.
Local check
hol-guard supply-chain scanTYPO3 CMS: Broken Access Control in Media Module affects typo3/cms-backend (composer), typo3/cms-backend (composer), typo3/cms-backend (composer), typo3/cms-backend (composer), typo3/cms-backend (composer), typo3/cms-core (composer), typo3/cms-core (composer), typo3/cms-core (composer), typo3/cms-core (composer), typo3/cms-core (composer). Severity is medium. ### Problem Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about records and files they were not authorized to view. ### Solution Update to TYPO3 versions 10.4.57 ELTS, 11.5.51 ELTS, 12.4.46 ELTS, 13.4.31 LTS, 14.3.3 LTS that fix the problem described. ### Credits TYPO3 CMS thanks Vincent Yang for reporting this issue, and to TYPO3 security team member Elias Häußler for fixing it. ### Resources * [TYPO3-CORE-SA-2026-014](https://typo3.org/security/advisory/typo3-core-sa-2026-014)
AI coding agents often install or upgrade packages automatically in composer. A medium vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.
### Problem Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about records and files they were not authorized to view. ### Solution Update to TYPO3 versions 10.4.57 ELTS, 11.5.51 ELTS, 12.4.46 ELTS, 13.4.31 LTS, 14.3.3 LTS that fix the problem described. ### Credits TYPO3 CMS thanks Vincent Yang for reporting this issue, and to TYPO3 security team member Elias Häußler for fixing it. ### Resources * [TYPO3-CORE-SA-2026-014](https://typo3.org/security/advisory/typo3-core-sa-2026-014)
Update typo3/cms-backend to 10.4.57; typo3/cms-backend to 11.5.51; typo3/cms-backend to 12.4.46; typo3/cms-backend to 13.4.31; typo3/cms-backend to 14.3.3; typo3/cms-core to 10.4.57; typo3/cms-core to 11.5.51; typo3/cms-core to 12.4.46; typo3/cms-core to 13.4.31; typo3/cms-core to 14.3.3 if you use the affected versions. Test the change in a non-production environment first.
Local check
hol-guard supply-chain scanTYPO3 CMS: Broken Access Control in Media Module affects typo3/cms-backend (composer), typo3/cms-backend (composer), typo3/cms-backend (composer), typo3/cms-backend (composer), typo3/cms-backend (composer), typo3/cms-core (composer), typo3/cms-core (composer), typo3/cms-core (composer), typo3/cms-core (composer), typo3/cms-core (composer). Severity is medium. ### Problem Backend users were able to insert arbitrary records and files into the TYPO3 clipboard without proper read permission checks, which allowed users to gather information about records and files they were not authorized to view. ### Solution Update to TYPO3 versions 10.4.57 ELTS, 11.5.51 ELTS, 12.4.46 ELTS, 13.4.31 LTS, 14.3.3 LTS that fix the problem described. ### Credits TYPO3 CMS thanks Vincent Yang for reporting this issue, and to TYPO3 security team member Elias Häußler for fixing it. ### Resources * [TYPO3-CORE-SA-2026-014](https://typo3.org/security/advisory/typo3-core-sa-2026-014)
AI coding agents often install or upgrade packages automatically in composer. A medium vulnerability in a dependency can be pulled into a project through a normal install or update without a human reviewing the change, expanding the blast radius from a single package to every agent workspace that depends on it.
| Package | Affected range | Fixed version |
|---|
| typo3/cms-backendcomposer | <10.4.57 | 10.4.57 |
|---|---|---|
| typo3/cms-backendcomposer | >=11.0.0,<11.5.51 | 11.5.51 |
| typo3/cms-backendcomposer | >=12.0.0,<12.4.46 | 12.4.46 |
| typo3/cms-backendcomposer | >=13.0.0,<13.4.31 | 13.4.31 |
| typo3/cms-backendcomposer | >=14.0.0,<14.3.3 | 14.3.3 |
| typo3/cms-corecomposer | <10.4.57 | 10.4.57 |
| typo3/cms-corecomposer | >=11.0.0,<11.5.51 | 11.5.51 |
| typo3/cms-corecomposer | >=12.0.0,<12.4.46 | 12.4.46 |
| typo3/cms-corecomposer | >=13.0.0,<13.4.31 | 13.4.31 |
| typo3/cms-corecomposer | >=14.0.0,<14.3.3 | 14.3.3 |
Fixed versions are reported by the source feed; confirm compatibility before updating.
Reported by GitHub Security Advisories (ghsa).
HOL Guard can help your team review package activity against supported protection paths.
Explore HOL Guard| Package | Affected range | Fixed version |
|---|
| typo3/cms-backendcomposer | <10.4.57 | 10.4.57 |
|---|---|---|
| typo3/cms-backendcomposer | >=11.0.0,<11.5.51 | 11.5.51 |
| typo3/cms-backendcomposer | >=12.0.0,<12.4.46 | 12.4.46 |
| typo3/cms-backendcomposer | >=13.0.0,<13.4.31 | 13.4.31 |
| typo3/cms-backendcomposer | >=14.0.0,<14.3.3 | 14.3.3 |
| typo3/cms-corecomposer | <10.4.57 | 10.4.57 |
| typo3/cms-corecomposer | >=11.0.0,<11.5.51 | 11.5.51 |
| typo3/cms-corecomposer | >=12.0.0,<12.4.46 | 12.4.46 |
| typo3/cms-corecomposer | >=13.0.0,<13.4.31 | 13.4.31 |
| typo3/cms-corecomposer | >=14.0.0,<14.3.3 | 14.3.3 |
Fixed versions are reported by the source feed; confirm compatibility before updating.
Reported by GitHub Security Advisories (ghsa).
HOL Guard can help your team review package activity against supported protection paths.
Explore HOL Guard