CVE-2026-27198 | getformwork up to 2.3.3 Account Creation privileges management (GHSA-34p4-7w83-35g2)

A vulnerability identified as critical has been detected in getformwork formwork up to 2.3.3. Affected by this issue is some unknown functionality of the component Account Creation Handler. This manipulation causes improper privilege management.

This vulnerability appears as CVE-2026-27198. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.