7.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-34603

CVE-2026-34603: @tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions

Tina is a headless content management system. Prior to version 2.2.2, @tinacms/cli recently added lexical path-traversal checks to the dev media routes, but the implementation still validates only the path string and does not resolve symlink or junction targets. If a link already exists under the media root, Tina accepts a path like pivot/written-from-media.txt as "inside" the media directory and then performs real filesystem operations through that link target. This allows out-of-root media listing and write access, and the same root cause also affects delete. This issue has been patched in version 2.2.2.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-34603

CVE-2026-34603:

7.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
@tinacms/graphql	npm	<= 2.2.1	2.2.2

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a path traversal weakness (CWE-22, CWE-59) in @tinacms/graphql and @tinacms/cli. The core issue is that path validation was purely lexical (string-based) and did not resolve symlinks or junctions. An attacker could create a symlink within the media directory that points to a location outside of it. When TinaCMS performed file operations (list, upload, delete), it would follow the symlink and operate on files outside the intended media root directory.

The fix, as seen in commit f124eabaca10dac9a4d765c9e4135813c4830955, involves adding checks that resolve the real filesystem path using fs.realpathSync. The new resolveRealPath helper function was introduced for this purpose. The validation functions assertPathWithinBase, assertWithinBase, resolveWithinBase, and resolveStrictlyWithinBase were updated to use this real-path validation, thus closing the security gap.

The vulnerable functions are the original implementations of these validation functions, which lacked the symlink check. Additionally, the public API functions that relied on this flawed validation, such as those in MediaModel and FilesystemBridge, are also considered vulnerable as they are the entry points for exploitation.

Vulnerable functions

resolveWithinBase

packages/@tinacms/cli/src/next/commands/dev-command/server/media.ts

This function performed lexical path validation which did not account for symlinks. An attacker could use a symlink to make a path appear to be within the allowed directory, while it actually points outside, leading to path traversal. The patch adds a call to `assertSymlinkWithinBase` to resolve and verify the real path.

resolveStrictlyWithinBase

packages/@tinacms/cli/src/next/commands/dev-command/server/media.ts

This function performed strict lexical path validation but was vulnerable to path traversal through symlinks because it did not resolve the real path of the file. The patch adds a call to `assertSymlinkWithinBase` to fix this.

resolveWithinBase

packages/@tinacms/cli/src/server/models/media.ts

This function was vulnerable to path traversal because it only checked the lexical path and did not resolve symlinks. This could be exploited to access files and directories outside the intended media root. The fix involves adding a call to `assertSymlinkWithinBase`.

resolveStrictlyWithinBase

packages/@tinacms/cli/src/server/models/media.ts

This path validation function was flawed as it did not resolve symlinks, allowing a path traversal vulnerability. An attacker could bypass the directory restrictions by creating a symlink. The patch adds a call to `assertSymlinkWithinBase` to mitigate this.

assertPathWithinBase

packages/@tinacms/cli/src/utils/path.ts

This utility function for path validation was missing a check for symlinks. It only performed lexical validation, which is insufficient to prevent path traversal when symlinks are involved. The patch adds a block to resolve the real path and re-validate containment.

assertWithinBase

packages/@tinacms/graphql/src/database/bridge/filesystem.ts

This function, used by the FilesystemBridge, was vulnerable to path traversal via symlinks. It did not resolve the real filesystem path before validation. The patch adds a check using `fs.realpathSync` to prevent this.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.