CVE-2026-71215
Last modified
CVE-2026-71215 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. art-template's sub-template resolution logic (src/compile/adapter/resolve-filename.js), used by both the include and extend template directives, resolves the target file path via path.resolve(root, filename) with no check afterward that the result remains inside root.. EPSS estimates a 0.37% chance of exploitation in the next 30 days.
Description
art-template's sub-template resolution logic (src/compile/adapter/resolve-filename.js), used by both the include and extend template directives, resolves the target file path via path.resolve(root, filename) with no check afterward that the result remains inside root.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| art-template | art-template | <= 4.13.4 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-71215?
How severe is CVE-2026-71215?
How do I fix CVE-2026-71215?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-7121A flaw has been found in Totolink A8000RU 7.1cu.643_b2020052…9.8
- CVE-2026-71210Mealie's AsyncSafeTransport SSRF guard (mealie/pkgs/safehttp…5.3
- CVE-2026-71211MLflow's AI Gateway accepts an auth_config.api_base value wh…7.1
- CVE-2026-71212xidown (a yt-dlp/ffmpeg GUI wrapper) builds its yt-dlp comma…4.4
- CVE-2026-71213Typemill's login endpoint (POST /tm/login, ControllerWebAuth…9.1
- CVE-2026-71214The Aerie/PlanDev sequencing-server's authorization middlewa…9.8
- CVE-2026-71216PagerDuty alarm hook transmits the integration routing key o…5.3
- CVE-2026-71217A flaw was found in iperf3. A remote attacker can exploit th…7.5
- CVE-2026-71218A flaw was found in iperf3. A remote unauthenticated attacke…5.3
- CVE-2026-71219A stack overflow vulnerability was found in gfs2-utils. The …4.7
- CVE-2026-7122A vulnerability has been found in Totolink A8000RU 7.1cu.643…9.8
- CVE-2026-71220A stack out-of-bounds write vulnerability was found in gfs2-…7
Are you affected by CVE-2026-71215?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST