CVE-2026-91925
Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Engine
- State
- Published
- Severity
- 8.7 High
- Published
- Sep 15, 2026
- Updated
- Sep 24, 2026
- Reserved
- Sep 15, 2026
Description
Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs with Jinja2 payloads in queue, namespace, conditions, presets, or dependencies fields to execute operating system commands in the scheduler process context, exposing database credentials and service tokens.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine
Affected Products
| Product | Versions |
|---|---|
polyaxonpolyaxon |
|
References
- GitHub Issue #1540issue-tracking
- https://github.com/polyaxon/polyaxonproduct
- engine.py - get_engine builds an unsandboxed jinja2.Environment used by render_templatetechnical-description
- sections.py - PARSING_SECTIONS includes the user-controlled queue, namespace and conditions fieldstechnical-description
- VulnCheck Advisory: Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Enginethird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.