CVE-2026-57853 · Package
NO FIX YET · SEE WHAT TO DO
DataGerry stores user-supplied Jinja2 templates and renders them in a non-sandboxed environment, so a user with template-add permission can run arbitrary operating system commands on the server. The sources report that the process runs as root in default Docker deployments, which makes this remote code execution.
first public Nov 4, 2026 · 1 source
Is this in your stack? Find out in 2 minutes.
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Teams running DataGerry 3.2.x or earlier where users can create document API templates. Exposure depends on who holds the template-add permission and whether the render endpoint is reachable; the sources say the default Docker deployment runs the process as root, which raises the impact. Installs on 3.3.0 or later are not affected by this flaw.
Not affected if no-template-add-permission, version-3.3.0-or-later
Who cares datagerry, docker, self-hosted
pip show datagerry or the deployment's image tag, if the sources' product naming applies to your install.base.docapi.template.add permission, since that is the access an attacker needs./rest/docapi/template endpoints are reachable from outside your network.3.3.0 or later (the sources say the flaw is fixed before this version).DataGerry before 3.3.0 contains a server-side template injection vulnerability that allows authenticated attackers with base.docapi.template.add permission to store arbitrary Jinja2 payloads in the template_data field via POST /rest/docapi/template, which is later rendered in a non-sandboxed Jinja2 environment when a user calls GET /rest/docapi/template/<id>/render/<object_id>. Attackers can exploit the standard cycler.init.globals.os gadget chain to execute arbitrary operating system commands as the DataGerry web process user, confirmed as root in default Docker deployments, achieving remote code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-57853") · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.