CVE-2026-102359

Kroki creates diagrams from textual descriptions. Prior to 0.31.2, the TikZ backend's tikz/tikz2svg guard used when KROKI_SAFE_MODE is enabled blocks only \verbatiminput while allowing native TeX file-read primitives including \openin, \read, \input, and \include. TeX Live's permissive openin_any setting remains active, so an unauthenticated actor can submit crafted LaTeX to POST /tikz/svg or the generic diagram API and cause the renderer to read any file accessible to the Kroki container user. The file contents are rendered into the returned SVG, which may disclose mounted secrets, configuration data, credentials, private keys, or process environment data. The -no-shell-escape option prevents shell execution but does not restrict these native file operations. This issue is fixed in version 0.31.2.

• CWE-22

• https://github.com/yuzutech/kroki/commit/9108ab5b429b9dc82b76432ccf40d4d7eeba1b30
• https://github.com/yuzutech/kroki/releases/tag/v0.31.2
• https://github.com/yuzutech/kroki/security/advisories/GHSA-r54f-fq6c-53vw

Published

Nov 6, 2026

Last Modified

Nov 6, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102340Telepresence enables local development against a remote Kube…8.5
• CVE-2026-102342ammonia is a Rust library for repairing and securing untrust…5.4
• CVE-2026-102345Zammad is a web based open source helpdesk/customer support …5.1
• CVE-2026-10235A flaw has been found in CodeAstro Ingredients Stock Managem…6.3
• CVE-2026-102354BentoPDF is a privacy-focused PDF toolkit that runs in the b…6.8
• CVE-2026-102356Kroki creates diagrams from textual descriptions. From 0.26.…5
• CVE-2026-10236A vulnerability has been found in SourceCodester Water Billi…7.3
• CVE-2026-102360A missing bounds check in the binary decoder in lib0, versio…8.6
• CVE-2026-102361mall4j through 4.0 contains a missing authentication vulnera…9.1
• CVE-2026-102362mall4j through 4.0 fails to implement authentication control…5.3
• CVE-2026-102363mall4j through 4.0 contains a missing authentication vulnera…3.7
• CVE-2026-102364mall4j through 4.0 fails to validate the sysType field in sa…5.4