CVE-2026-105805: Payload: Sort queries could expose protected field information

October 6, 2026

Under certain conditions, sorting readable records could reveal limited information about fields the requester was not permitted to read.

You are affected if untrusted users can query a collection, control its sorting, and sort by protected fields.

References

github.com/advisories/GHSA-9g87-32v6-3c2r
github.com/payloadcms/payload/commit/a742140ab4fca3160f7f83e9e7d996552ffc3b5a
github.com/payloadcms/payload/releases/tag/v3.88.0
github.com/payloadcms/payload/security/advisories/GHSA-9g87-32v6-3c2r
nvd.nist.gov/vuln/detail/CVE-2026-105805

Code Behaviors & Features

Detect and mitigate CVE-2026-105805 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →