Verified — Unauthenticated SQL injection in dotCMS Publish Audit API
Severity CRITICAL
Confidence HIGH
Reproduced in 116m 7s
Tool calls 532
Spend $10.15
Affected dotCMS Core 25.11.04-1 through 26.04.28-02
$
pruva-verify REPRO-2026-00194 or
curl -O https://pruva.dev/api/v1/reproductions/REPRO-2026-00194/artifacts/bundle/repro/reproduction_steps.sh && chmod +x reproduction_steps.sh && ./reproduction_steps.sh Run in a VM or disposable container. This exploits a real vulnerability.
CVE-2026-8054 / GHSA-jpx3-25r2-jq5g affects dotCMS Core Publish Audit API endpoints. Public advisory data reports unauthenticated SQL injection in /api/auditPublishing/get and /api/auditPublishing/getAll for dotCMS Core versions 25.11.04-1 through 26.04.28-02, fixed in 26.04.28-03. The vulnerable path was not backported to LTS releases.
Variant analysis
The agent's step-by-step process — every tool call, every handoff, the moment the exploit fired. Phases: support triages the advisory · repro reproduces it · vuln_variant confirms the fix blocks it · judge verifies.
Loading session...
Scripts, logs, diffs, and output captured during the reproduction.
bundle/repro/validation_verdict.json0.6 KBbundle/ticket.json1.9 KBbundle/ticket.md1.4 KBbundle/logs/fixed_opensearch_container.log34.6 KBbundle/logs/vuln_dotcms_container.log205.3 KBbundle/logs/fixed_dotcms_container.log205.8 KBbundle/logs/vuln_opensearch_container.log35.6 KBbundle/logs/vuln_results.json0.3 KBbundle/logs/fixed_results.json0.5 KBbundle/logs/timing_summary.tsv0.5 KBbundle/logs/vuln_postgres_container.log4.1 KBbundle/logs/fixed_postgres_container.log4.1 KBbundle/logs/test_api.py2.0 KBbundle/logs/verdict.json0.0 KBbundle/logs/reproduction_steps.log18.4 KBbundle/logs/vuln_variant_reproduction_steps.log7.4 KBbundle/logs/vuln_variant_results.json2.4 KBbundle/logs/vuln_variant_analysis.json2.1 KBbundle/logs/fixed_variant_results.json4.0 KBbundle/logs/verify_fix.log0.9 KBbundle/repro/reproduction_steps.sh14.7 KBbundle/repro/rca_report.md7.8 KBbundle/coding/proposed_fix.diff6.6 KBbundle/coding/summary_report.md5.2 KBbundle/coding/verify_fix.sh2.0 KBbundle/vuln_variant/patch_analysis.md5.4 KBbundle/vuln_variant/rca_report.md7.4 KBbundle/vuln_variant/reproduction_steps.sh11.6 KBbundle/vuln_variant/root_cause_equivalence.json2.3 KBbundle/vuln_variant/runtime_manifest.json0.8 KBbundle/vuln_variant/test_variant.py3.9 KBbundle/vuln_variant/validation_verdict.json1.0 KBbundle/vuln_variant/variant_manifest.json3.1 KB