CVE-2026-72833 | GetGrav Grav API Plugin up to 1.0.11 API Key Scope Enforcement requirePermission privileges management

A vulnerability, which was classified as critical, was found in GetGrav Grav API Plugin up to 1.0.11. This impacts the function requirePermission of the component API Key Scope Enforcement. Such manipulation leads to improper privilege management.

This vulnerability is traded as CVE-2026-72833. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.