CVE-2026-54262

Affected versions of the Wagtail package are vulnerable to Improper Handling of Insufficient Permissions or Privileges due to insufficient permission checks in the `simple_translation` module. The `simple_translation` feature allows users with the "Can submit translation" permission to create translations for any page, bypassing the intended page-level permissions. An attacker with low-level user access can exploit this vulnerability to create unauthorized translations of pages they do not have explicit permissions to access, potentially leading to unauthorized content changes.