---
id: "CVE-2026-57853"
kind: "vulnerability"
aliases: ["CVE-2026-57853"]
title: "DataGerry: template injection lets authenticated users run server commands"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["datagerry", "docker", "package", "self-hosted"]
not_affected_if: ["no-template-add-permission", "version-3.3.0-or-later"]
published_at: "2026-11-04T18:17:44+00:00"
first_seen_at: "2026-11-04T18:28:34+00:00"
updated_at: "2026-11-04T18:29:37+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-57853", "first_seen_at": "2026-11-04T18:28:34+00:00"}]
---

# DataGerry: template injection lets authenticated users run server commands

DataGerry stores user-supplied Jinja2 templates and renders them in a non-sandboxed environment, so a user with template-add permission can run arbitrary operating system commands on the server. The sources report that the process runs as root in default Docker deployments, which makes this remote code execution.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Look for DataGerry in your inventory and note the installed version, for example with `pip show datagerry` or the deployment's image tag, if the sources' product naming applies to your install.
- Check whether users hold the `base.docapi.template.add` permission, since that is the access an attacker needs.
- Check whether the `/rest/docapi/template` endpoints are reachable from outside your network.

## Fix

- DataGerry: move to `3.3.0` or later (the sources say the flaw is fixed before this version).

## Timeline

- 2026-11-04T18:28:34+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-57853

## Documents

- [advisory] Third-party advisory: www.vulncheck.com https://www.vulncheck.com/advisories/datagerry-ssti-via-docapi-template-rendering
- [fix] Release notes: github.com https://github.com/DataGerry/DataGerry/releases/tag/3.3.0

## From the sources

DataGerry before 3.3.0 contains a server-side template injection vulnerability that allows authenticated attackers with base.docapi.template.add permission to store arbitrary Jinja2 payloads in the template_data field via POST /rest/docapi/template, which is later rendered in a non-sandboxed Jinja2 environment when a user calls GET /rest/docapi/template/<id>/render/<object_id>. Attackers can exploit the standard cycler.__init__.__globals__.os gadget chain to execute arbitrary operating system commands as the DataGerry web process user, confirmed as root in default Docker deployments, achieving remote code execution.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_