CVE-2026-48167: Filament Laravel XSS Vulnerability

CVE-2026-48167 Overview

CVE-2026-48167 is a stored cross-site scripting (XSS) vulnerability in Filament, a collection of full-stack components for accelerated Laravel development. The flaw affects the ImageColumn and ImageEntry components in versions from 4.0.0 up to (but not including) 4.11.5 and 5.6.5. These components render raw database values without escaping HTML output. When applications pass unvalidated data to these components, attackers can inject malicious HTML or JavaScript that executes in the browser of any user viewing the affected table or schema. The maintainers have released fixed versions 4.11.5 and 5.6.5.

Critical Impact
Authenticated attackers can plant persistent JavaScript payloads that execute against every user who renders the affected Filament table or schema view, enabling session theft and UI manipulation.

Affected Products

Filament versions 4.0.0 through 4.11.4
Filament versions 5.0.0 through 5.6.4
Laravel applications using ImageColumn or ImageEntry components with unvalidated input

Discovery Timeline

2026-06-22 - CVE-2026-48167 published to NVD
2026-06-23 - Last updated in NVD database

Technical Details for CVE-2026-48167

Vulnerability Analysis

The vulnerability is classified as [CWE-79] Improper Neutralization of Input During Web Page Generation. The ImageColumn and ImageEntry components in Filament render image source values directly into the rendered HTML markup. The components do not apply Laravel's standard HTML escaping to the stored database value before placing it inside the output template.

An attacker with permission to write data into a field bound to one of these components can store an HTML or JavaScript payload instead of a legitimate image URL. When any Filament user subsequently loads a table view or schema page that renders that record, the browser parses and executes the injected payload. The payload runs in the context of the authenticated user's session, granting access to session cookies, CSRF tokens, and any Filament admin actions that the viewing user can perform.

Root Cause

The root cause is missing output encoding in the Blade templates backing ImageColumn and ImageEntry. The components trusted the column value to be a URL or file path and emitted it without HTML entity encoding. This violates the principle of contextual output escaping, particularly since the rendered value is interpolated into HTML attribute or element contexts.

Attack Vector

Exploitation requires network access to the Filament admin panel and at least low-privilege authentication, since the attacker must be able to write into a database field that backs an affected component. After storing the payload, no further interaction is required from the victim beyond viewing the resource list or detail page. The scope changes because the script executes in the security context of other Filament users, including administrators who may hold elevated privileges over the application.

No verified proof-of-concept code is published. See the GitHub Security Advisory for vendor technical details.

Detection Methods for CVE-2026-48167

Indicators of Compromise

Database records in image-bound columns containing HTML tags such as <script>, <img onerror=, or javascript: URIs
Filament admin sessions exhibiting unexpected outbound requests to attacker-controlled domains
Unexpected DOM injection or modified admin panel behavior reported by Filament users

Detection Strategies

Query database tables backing ImageColumn and ImageEntry fields for values that do not match expected URL or file path patterns
Inspect web server access logs for anomalous outbound requests originating from admin sessions
Review Content Security Policy (CSP) violation reports for inline script execution on Filament admin routes

Monitoring Recommendations

Enable Laravel request and response logging on Filament administrative routes to capture rendered HTML anomalies
Monitor application audit logs for write operations against image-source columns by low-privilege accounts
Forward Filament application logs and browser CSP reports into a centralized analytics platform for correlation

How to Mitigate CVE-2026-48167

Immediate Actions Required

Upgrade Filament to version 4.11.5 (for the 4.x branch) or 5.6.5 (for the 5.x branch) without delay
Audit existing records stored in fields rendered by ImageColumn or ImageEntry and remove any entries containing HTML or script content
Rotate session tokens for Filament administrators if exploitation is suspected

Patch Information

The Filament maintainers fixed CVE-2026-48167 in releases 4.11.5 and 5.6.5. The patch adds proper HTML escaping to the affected component templates so that stored values are no longer rendered as executable markup. Apply the upgrade through Composer: composer require filament/filament:^4.11.5 or composer require filament/filament:^5.6.5. Consult the GitHub Security Advisory GHSA-3fc8-8hp6-6jr4 for the full advisory and patch references.

Workarounds

Apply strict server-side validation to any field used as an image source so only well-formed URLs or file paths can be stored
Deploy a Content Security Policy that disallows inline scripts on Filament admin routes to limit payload execution
Restrict write access to image-source fields so only trusted administrative roles can populate them until the upgrade is applied

bash

# Upgrade Filament via Composer
composer require filament/filament:^5.6.5
php artisan view:clear
php artisan config:clear