by Kastro
Paper/Archive/CVE-2026-33587

CVE-2026-33587

Open Notebook Open Notebook — Remote Code Execution (RCE) via Server-Side Template Injection (SSTI)

EPSS 0.2%CVSS 10.0
critical.is priorityof 100
33
CVSS 10.0 (NVD)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 13.8.138 × 202.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the docker container via Server-Side Template Injection (SSTI) for user-created transformations.

Affected

ProductAffectedFixed inSource
Open Notebook≤ 1.8.3–CNA

Scores by source

NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
ENISA (CNA)9.2CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorygithub.com/lfnovo/open-notebook/security/advisories/GHSA-f35w-wx37-26q7