CVE-2026-105856: Payload: SQL injection in SQLite/Postgres

Description

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled can inject SQL through a crafted field path and operators. Collections without those fields are not affected, and richText fields are not affected. The SQLite packages are fixed in versions 3.90.0 and 4.0.0-canary.34, and the Postgres packages are fixed in version 3.73.0.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Attack vector

Network

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

Low

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 22% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

DB

db-d1-sqlite · @payloadcms

>= 3.0.0, < 3.90.0; >= 4.0.0-canary.0, < 4.0.0-canary.34 · source: vendor

DB

db-postgres · @payloadcms

>= 3.0.0 < 3.73.0 · source: vendor

DB

db-sqlite · @payloadcms

>= 3.0.0, < 3.90.0; >= 4.0.0-canary.0, < 4.0.0-canary.34 · source: vendor

DB

db-vercel-postgres · @payloadcms

>= 3.0.0 < 3.73.0 · source: vendor

PA

payload · payloadcms

>= 3.0.0, < 3.90.0; >= 4.0.0-canary.0, < 4.0.0-canary.34 · source: vendor, NVD