jinja2: Jinja has a sandbox breakout through indirect reference to format method

🗓️ 28 Jan 2025 04:59:21Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 5 Views

Jinja sandbox flaw allows arbitrary Python code via indirect str.format calls in untrusted templates; fixed.

Reporter	Title	Published	Views	Family All 341
ibm	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
ibm	Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities	16 Apr 202514:34	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to multiple Operator package issues	1 May 202521:38	–	ibm
ibm	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm
ibm	Security Bulletin: Location Service for ESRI Component uses multiple vulnerable libraries and wildcard characters when defining RBAC permissions in Dockerfiles which are vulnerable to multiple CVEs	6 May 202506:26	–	ibm
ibm	Security Bulletin: There is a vulnerability in the wheel package for Jinja2 affecting watsonx Code Assistant On Prem Extensions	27 Mar 202515:33	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to an arbitrary code execution in Jinja [CVE-2024-56326]	1 May 202517:28	–	ibm
ibm	Security Bulletin: Vulnerabilities in Jinja , cryptography & OpenSSL can affect IBM Storage Protect Plus File Systems Agent Backup and Restore	21 Jun 202508:35	–	ibm
ibm	Security Bulletin: Jinja Template Sandbox Escape via Indirect str.format Execution Prior to 3.1.5	26 Jun 202518:51	–	ibm
ibm	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	31 May 202514:06	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	9	noarch	python3-jinja2	3.1.5-1.el9	python3-jinja2-3.1.5-1.el9.noarch.rpm
Red Hat Enterprise Linux	9	noarch	python3-jinja2+i18n	3.1.5-1.el9	python3-jinja2+i18n-3.1.5-1.el9.noarch.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2024-56326
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4
github	www.github.com/pallets/jinja/releases/tag/3.1.5
github	www.github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-56326
cve	www.cve.org/CVERecord

01 Jul 2026 13:59Current

7.5High risk

Vulners AI Score7.5

CVSS 45.4

CVSS 3.17.8

EPSS0.005

SSVC

jinja sandbox flaw indirect format call untrusted templates code execution risk python code execution unix