CVE-2026-108264

Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor or imported bundles was evaluated by app/blueprints/wizard/routes.py in the application's non-sandboxed Jinja2 environment with application globals exposed. An authenticated user able to create steps, or an administrator importing an untrusted bundle through POST /settings/wizard/import, could execute arbitrary Python when GET /wizard/{server}/{idx} rendered the stored step; app/jinja_filters.py and app/services/wizard_widgets.py contained additional evaluation sinks. This could execute operating-system commands as the application user, disclose the Flask SECRET_KEY, access connected service credentials and the database, and produce stored cross-site scripting. This issue is fixed in 2026.9.1.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.3 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/wizarrrr/wizarr/commit/6aa3c33c1b3d945e055ef116cc531028b3735bb7
https://github.com/wizarrrr/wizarr/releases/tag/v2026.9.1
https://github.com/wizarrrr/wizarr/security/advisories/GHSA-h9rv-mxh2-35f3
https://github.com/wizarrrr/wizarr/security/advisories/GHSA-h9rv-mxh2-35f3

Configurations

No configuration.

History

13 Oct 2026, 16:17

Type	Values Removed	Values Added
References	~~() https://github.com/wizarrrr/wizarr/security/advisories/GHSA-h9rv-mxh2-35f3 -~~	() https://github.com/wizarrrr/wizarr/security/advisories/GHSA-h9rv-mxh2-35f3 -

09 Oct 2026, 21:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-09 21:17

Updated : 2026-10-16 20:04

NVD link : CVE-2026-108264

Mitre link : CVE-2026-108264

CVE.ORG link : CVE-2026-108264

JSON object : View

Products Affected

No product.

CWE

CWE-1336

Improper Neutralization of Special Elements Used in a Template Engine

{"id": "CVE-2026-108264", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-108264", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-10-13T15:13:10.988706Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "wizarrrr", "product": "wizarr", "versions": [{"status": "affected", "version": "< 2026.9.1"}]}]}], "published": "2026-10-09T21:17:04.703", "references": [{"url": "https://github.com/wizarrrr/wizarr/commit/6aa3c33c1b3d945e055ef116cc531028b3735bb7", "source": "security-advisories@github.com"}, {"url": "https://github.com/wizarrrr/wizarr/releases/tag/v2026.9.1", "source": "security-advisories@github.com"}, {"url": "https://github.com/wizarrrr/wizarr/security/advisories/GHSA-h9rv-mxh2-35f3", "source": "security-advisories@github.com"}, {"url": "https://github.com/wizarrrr/wizarr/security/advisories/GHSA-h9rv-mxh2-35f3", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-1336"}]}], "descriptions": [{"lang": "en", "value": "Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor or imported bundles was evaluated by app/blueprints/wizard/routes.py in the application's non-sandboxed Jinja2 environment with application globals exposed. An authenticated user able to create steps, or an administrator importing an untrusted bundle through POST /settings/wizard/import, could execute arbitrary Python when GET /wizard/{server}/{idx} rendered the stored step; app/jinja_filters.py and app/services/wizard_widgets.py contained additional evaluation sinks. This could execute operating-system commands as the application user, disclose the Flask SECRET_KEY, access connected service credentials and the database, and produce stored cross-site scripting. This issue is fixed in 2026.9.1."}], "lastModified": "2026-10-16T20:04:29.760", "sourceIdentifier": "security-advisories@github.com"}