✨ Strapi MCP is now Generally Available - let your agents manage your Strapi content ✨

Disclosure

Product●11 min read

Security Disclosure of Vulnerabilities: CVE-2025-64526, CVE-2026-22599, CVE-2026-22706, CVE-2026-22707, and CVE-2026-27886

Disclosure Summary Thanks to several community members and our internal security team, we have notified and patched five security vulnerabilities: CVE202564526: — Rate limit bypass on auth routes ...

D
Derrick Mehaffy
●May 13, 2026
Strapi Security Disclosure: Five Vulnerabilities Patched in v5 (and v4 LTS)

Join our Newsletter

Get all the latest news and events.

By submitting this form you consent to us emailing you occasionally about our products and services. You can unsubscribe from emails at any time, and we will never pass your email to third parties.