Grav versions from 2.0.0 through 2.0.24 lack a necessary sandbox guard on the Twig "array" filter, allowing the raw dependency injection container to be accessed and converted to an array. This results in the entire configuration tree, including sensitive credentials, being exposed to anyone who can inject Twig code into page content. The vulnerability is an information‑disclosure flaw that exposes confidential data such as plugin credentials, SMTP and OAuth secrets, Redis passwords, proxy URLs, and security-related settings.

The affected products are Grav CMS (getgrav:grav) from release 2.0.0 up to and including 2.0.24. The earlier Grav 1.7 release is not affected because it does not provide a Twig content sandbox. Users of any 2.0.x release prior to 2.0.25 that allow page authors to embed Twig code are susceptible.

With a CVSS score of 7.1, the vulnerability poses a significant risk to confidentiality. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog. An attacker must possess the ability to author Twig in page content—typically a privileged content editor or a compromised account—to trigger the sandbox escape. Upon exploitation, the attacker gains read access to the full configuration tree, exposing credentials to anonymous visitors who render the affected page content.