7.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-68278

CVE-2025-68278: tinacms vulnerable to arbitrary code execution

Tina is a headless content management system. In tinacms prior to version 3.1.1, tinacms uses the gray-matter package in an insecure way allowing attackers that can control the content of the processed markdown files, e.g., blog posts, to execute arbitrary code. tinacms version 3.1.1, @tinacms/cli version 2.0.4, and @tinacms/graphql version 2.0.3 contain a fix for the issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-68278

CVE-2025-68278:

7.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
tinacms	npm	< 3.1.1	3.1.1
@tinacms/cli	npm	< 2.0.4	2.0.4
@tinacms/graphql	npm	< 2.0.3	2.0.3

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the tinacms backend, specifically within the @tinacms/graphql package. The root cause is the insecure use of the gray-matter library for parsing markdown files. By default, gray-matter executes Javascript code found in the frontmatter of a file if it is marked with a js language identifier. An attacker could craft a markdown file with a malicious Javascript payload in the frontmatter. When the tinacms backend processes this file using the parseFile function, the malicious code would be executed on the server, leading to Remote Code Execution (RCE).

The patch addresses this vulnerability in packages/@tinacms/graphql/src/database/util.ts by explicitly disabling the Javascript and Coffeescript engines in gray-matter. This is achieved by passing a custom engines configuration to the matter() call inside the parseFile function. The custom configuration overrides the default parsers for js, javascript, coffee, and coffeescript to simply throw an error instead of executing any code. The stringifyFile function was also updated to prevent the creation of files with these insecure frontmatter types. The primary vulnerable function that would be seen in a stack trace during exploitation is parseFile.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.