{"id":"CVE-2026-57853","kind":"vulnerability","aliases":["CVE-2026-57853"],"related":[],"title":"DataGerry: template injection lets authenticated users run server commands","description":"DataGerry before 3.3.0 contains a server-side template injection vulnerability that allows authenticated attackers with base.docapi.template.add permission to store arbitrary Jinja2 payloads in the template_data field via POST /rest/docapi/template, which is later rendered in a non-sandboxed Jinja2 environment when a user calls GET /rest/docapi/template/<id>/render/<object_id>. Attackers can exploit the standard cycler.__init__.__globals__.os gadget chain to execute arbitrary operating system commands as the DataGerry web process user, confirmed as root in default Docker deployments, achieving remote code execution.","summary":"DataGerry stores user-supplied Jinja2 templates and renders them in a non-sandboxed environment, so a user with template-add permission can run arbitrary operating system commands on the server. The sources report that the process runs as root in default Docker deployments, which makes this remote code execution.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["datagerry","docker","package","self-hosted"],"not_affected_if":["no-template-add-permission","version-3.3.0-or-later"],"how_to_check":"- Look for DataGerry in your inventory and note the installed version, for example with `pip show datagerry` or the deployment's image tag, if the sources' product naming applies to your install.\n- Check whether users hold the `base.docapi.template.add` permission, since that is the access an attacker needs.\n- Check whether the `/rest/docapi/template` endpoints are reachable from outside your network.","fix":"- DataGerry: move to `3.3.0` or later (the sources say the flaw is fixed before this version).","status":"open","published_at":"2026-11-04T18:17:44+00:00","first_seen_at":"2026-11-04T18:28:34+00:00","triaged_at":"2026-11-04T18:29:37+00:00","updated_at":"2026-11-04T18:29:37+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-11-04T18:29:37Z","model":"claude-haiku-5-5","output":{"fix":"- DataGerry: move to `3.3.0` or later (the sources say the flaw is fixed before this version).","reach":"network","title":"DataGerry: template injection lets authenticated users run server commands","impact":"high","summary":"DataGerry stores user-supplied Jinja2 templates and renders them in a non-sandboxed environment, so a user with template-add permission can run arbitrary operating system commands on the server. The sources report that the process runs as root in default Docker deployments, which makes this remote code execution.","audience":"businesses","category":"package","nicknames":[],"who_cares":["datagerry","self-hosted","docker"],"confidence":0.8,"fix_status":"available","needs_auth":"yes","worst_case":"Attacker runs operating system commands as root on the server.","analyst_note":"Confirm the exact affected version range and the fixed release notes at the linked GitHub release page.","how_to_check":"- Look for DataGerry in your inventory and note the installed version, for example with `pip show datagerry` or the deployment's image tag, if the sources' product naming applies to your install.\n- Check whether users hold the `base.docapi.template.add` permission, since that is the access an attacker needs.\n- Check whether the `/rest/docapi/template` endpoints are reachable from outside your network.","plain_action":"","needs_analyst":true,"not_affected_if":["version-3.3.0-or-later","no-template-add-permission"],"who_is_affected":"Teams running DataGerry 3.2.x or earlier where users can create document API templates. Exposure depends on who holds the template-add permission and whether the render endpoint is reachable; the sources say the default Docker deployment runs the process as root, which raises the impact. Installs on 3.3.0 or later are not affected by this flaw.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000747,"input_tokens":4274,"output_tokens":639,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-57853':12A,15A '/render':122C '/rest/docapi/template':104C,121C '3.3.0':76C 'achiev':150C 'add':44B 'allow':86C 'arbitrari':48B,94C,133C 'attack':88C,123C 'authent':5A,87C 'base.docapi.template.add':90C 'call':119C 'chain':130C 'code':72B,152C 'command':9A,51B,136C 'confirm':143C 'contain':77C 'cve':10A,13A 'cycler.__init__.__globals__.os':128C 'data':100C 'datagerri':1A,16B,22B,74C,139C 'default':65B,147C 'deploy':67B,149C 'docker':17B,66B,148C 'environ':37B,115C 'execut':73B,132C,153C 'exploit':125C 'field':101C 'gadget':129C 'get':120C 'host':21B 'inject':3A,83C 'jinja2':27B,95C,114C 'later':107C 'let':4A 'make':69B 'non':35B,112C 'non-sandbox':34B,111C 'oper':49B,134C 'packag':18B 'payload':96C 'permiss':45B,91C 'post':103C 'process':60B,141C 'remot':71B,151C 'render':30B,108C 'report':57B 'root':63B,145C 'run':7A,47B,61B 'sandbox':36B,113C 'self':20B 'self-host':19B 'server':8A,54B,80C 'server-sid':79C 'side':81C 'sourc':56B 'standard':127C 'store':23B,93C 'suppli':26B 'system':50B,135C 'templat':2A,28B,43B,82C,99C 'template-add':42B 'user':6A,25B,40B,118C,142C 'user-suppli':24B 'via':102C 'vulner':84C 'web':140C","nicknames":[],"mitigations":[],"who_affected":"Teams running DataGerry 3.2.x or earlier where users can create document API templates. Exposure depends on who holds the template-add permission and whether the render endpoint is reachable; the sources say the default Docker deployment runs the process as root, which raises the impact. Installs on 3.3.0 or later are not affected by this flaw.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["datagerry","docker","high","package","selfhosted"],"campaign_type":null,"first_public_at":"2026-11-04T18:17:44+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-57853","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-57853","severity":null,"published_at":"2026-11-04T18:17:44+00:00","modified_at":"2026-11-04T18:17:44+00:00","first_seen_at":"2026-11-04T18:28:34+00:00","fetched_at":"2026-11-04T18:28:34+00:00","note":null}],"documents":[{"id":69371,"url":"https://github.com/DataGerry/DataGerry/releases/tag/3.3.0","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":69372,"url":"https://www.vulncheck.com/advisories/datagerry-ssti-via-docapi-template-rendering","title":"Third-party advisory: www.vulncheck.com","kind":"advisory","source":"nvd","publisher":"research","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":"Third-party advisory: www.vulncheck.com"}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}