The vulnerability resides in Grav’s Twig content sandbox, which is meant to restrict the execution of user‑generated content. Before version 2.0.2 the sandbox allows the function grav.offsetGet('config') to retrieve the raw configuration object. That object can be serialized via json_encode, print_r, yaml_encode, or string filters without the sandbox’s security policy check. As a result an attacker with page‑author permissions can render a page that exposes any plugin‑specific configuration values, such as SMTP credentials, API keys, and database credentials.

All Grav installations using the Twig sandbox version prior to 2.0.2 are affected, which includes Grav 2.0.1 and earlier releases. The fix is delivered in Grav 2.0.2 and later releases.

The CVSS score is 6.5, and the EPSS score is listed as less than 1 %, indicating a very low but nonzero chance of exploitation. The vulnerability is not in the CISA KEV catalog. Exploitation requires only the ability to render sandboxed content with page‑author permissions; no higher administrative or remote network access is needed. The attack path is straightforward: an attacker creates or edits a page to include a template that triggers the exposed serialization, leading to disclosure of sensitive configuration data.