CVE-2025-66438

A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism. Specifically, the API frappe.www.printview.get_html_and_style() triggers the rendering of the html field inside a Print Format document using frappe.render_template(template, doc) via the get_rendered_template() call chain. Although ERPNext wraps Jinja2 in a SandboxedEnvironment, it exposes sensitive functions such as frappe.db.sql through get_safe_globals(). An authenticated attacker with permission to create or modify a Print Format can inject arbitrary Jinja expressions into the html field. Once the malicious Print Format is saved, the attacker can call get_html_and_style() with a target document (e.g., Supplier or Sales Invoice) to trigger the render process. This leads to information disclosure from the database, such as database version, schema details, or sensitive values, depending on the injected payload. Exploitation flow: Create a Print Format with SSTI payload in the html field; call the get_html_and_style() API; triggers frappe.render_template(template, doc) inside get_rendered_template(); leaks database information via frappe.db.sql or other exposed globals.

• CWE-94
• CWE-1336

• https://iamanc.github.io/post/erpnext-ssti-bug-5Exploit, Third Party Advisory
• https://www.notion.so/SSTI-bug-5-239e6086eadc80a48f17c1257a604d2c?source=copy_linkExploit, Third Party Advisory

Published

Dec 15, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-66432In Oxide control plane 15 through 17 before 17.1, API tokens…5
• CVE-2025-66433HTCondor Access Point before 25.3.1 allows an authenticated …4.2
• CVE-2025-66434An SSTI (Server-Side Template Injection) vulnerability exist…8.8
• CVE-2025-66435An SSTI (Server-Side Template Injection) vulnerability exist…4.3
• CVE-2025-66436An SSTI (Server-Side Template Injection) vulnerability exist…4.3
• CVE-2025-66437An SSTI (Server-Side Template Injection) vulnerability exist…8.8
• CVE-2025-66439An issue was discovered in Frappe ERPNext through 15.89.0. F…8.8
• CVE-2025-6644PDF-XChange Editor U3D File Parsing Use-After-Free Remote Co…7.8
• CVE-2025-66440An issue was discovered in Frappe ERPNext through 15.89.0. F…8.8
• CVE-2025-66442In Mbed TLS through 4.0.0, there is a compiler-induced timin…5.1
• CVE-2025-66443Pexip Infinity 35.0 through 38.1 before 39.0, in non-default…5.3
• CVE-2025-66444Cross-site Scripting vulnerability in Hitachi Infrastructure…8.2