Live › vulnerability › CVE-2026-115354
Go to dashboardMistune before 3.3.0 has a path traversal flaw in its opt-in Include directive that lets relative or absolute include paths reach local files. An attacker who submits Markdown rendered through Markdown.read() can read files such as /etc/passwd and inject unescaped HTML or script into the output.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that use Mistune 3.x before 3.3.0 with the opt-in Include directive turned on and that render Markdown from users or other untrusted sources through Markdown.read(). Systems that only render trusted, internally authored Markdown, or that keep the Include directive off, are less exposed.
No product ranges from the sources yet.
pip show mistune or python -c "import mistune; print(mistune.__version__)"include plugin or directive registration in Mistune setupMarkdown.read( calls that render user-submitted Markdown3.3.0 or later with pip install --upgrade "mistune>=3.3.0"Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Mistune before 3.3.0 contains a path traversal vulnerability in the opt-in Include directive that allows attackers to read local files by supplying relative or absolute include paths. Attackers who submit Markdown rendered via Markdown.read() can disclose files such as /etc/passwd and inject unescaped HTML or script content into rendered output.
This page as .md · .json · in your agent: get_signal("CVE-2026-115354")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.