CVE-2026-91925
Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs with Jinja2 payloads in queue, namespace, conditions, presets, or dependencies fields to execute operating system commands in the scheduler process context, exposing database credentials and service tokens.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.8
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.48%
- CWE
- CWE-1336
- Published
- 2026-09-15
- Last modified
- 2026-09-15
Affected products
- polyaxon polyaxon
Weakness type
Related vulnerabilities
- CVE-2025-34300 — Sawtooth Software Lighthouse Studio < 9.16.14 Pre-Authentication RCE
- CVE-2025-49136 — listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user
- CVE-2026-75650 — Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
- CVE-2025-66294 — Grav is vulnerable to RCE via SSTI through Twig Sandbox Bypass
- CVE-2026-33897 — Incus vulnerable to arbitrary file read and write through pongo templates
- CVE-2025-53833 — LaRecipe is vulnerable to Server-Side Template Injection attacks
- CVE-2025-47916 — Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The
- CVE-2025-46661 — IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the at