CVE-2024-56201
highpriority · track · 35EPSS 0.003 · 23 %ileDEEURUUSEPSS · scored 2026-10-27
Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of if Jinja's sandbox is used. To exploit the vulnerability, an attacker needs to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates where the template author can also choose the template filename. This vulnerability is fixed in 3.1.5.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–high · 2–8.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (54)
Products and version ranges known to be affected.
- IBM InfoSphere Information Server 11.7all versionscert_bundDEcpe:/a:ibm:infosphere_information_server:11.7
- Red Hat Ansible Automation Platformall versionscert_bundDEcpe:/a:redhat:ansible_automation_platform:-
- Red Hat Ansible Automation Platform 2.4all versionscert_bundDEcpe:/a:redhat:ansible_automation_platform:2.4
- Red Hat Ansible Automation Platform Container Releaseall versionscert_bundDEcpe:/a:redhat:ansible_automation_platform:::container_release
advisories (3)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2025-0054Red Hat Enterprise Linux (Jinja): Mehrere Schwachstellen ermöglichen CodeausführungDeutsch2025-01-13csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux, Red Hat Ansible Automation Platform und Red Hat OpenShift ausnutzen, um beliebigen Programmcode auszuführen.
- GHSA-gmj6-6f8f-6699Jinja has a sandbox breakout through malicious filenames2024-12-23ghsa · osvUS
A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of if Jinja's sandbox is used. To exploit the vulnerability, an attacker needs to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates where the template author can also choose the template filename.
- PYSEC-2026-1472Jinja has a sandbox breakout through malicious filenames2026-07-07vendor · osvUS
A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of if Jinja's sandbox is used. To exploit the vulnerability, an attacker needs to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates where the template author can also choose the template filename.
also known as (7)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (15)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/cve-2024-56201cnnvd
- https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51fcnnvd
- https://github.com/pallets/jinja/issues/1792cnnvd
- https://github.com/pallets/jinja/releases/tag/3.1.5cnnvd
- https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2024-56201cnnvd
- https://vigilance.fr/vulnerability/Jinja-code-execution-via-Template-Filename-Contents-45994cnnvd
- https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51fenisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan