{"id":"CVE-2026-109652","published":"2026-10-12T23:17:31.723","lastModified":"2026-10-14T13:17:27.313","description":"Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering, allowing expressions to run in an unrestricted context. Authenticated attackers holding a common operational role can inject template expressions to read and write arbitrary database data, delete documents, send outbound requests from the server, and send mail from the site.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-1336"],"vendors":[],"products":[],"references":[{"url":"https://github.com/frappe/erpnext/security/advisories/GHSA-6w83-8777-v93q","tags":[]},{"url":"https://www.vulncheck.com/advisories/frappe-erpnext-before-15.119.1-server-side-template-injection-via-message-fields","tags":[]}],"exploitRefs":[{"url":"https://github.com/frappe/erpnext/security/advisories/GHSA-6w83-8777-v93q","tags":[]}],"hasPoc":true,"ai":{"summary":"A server-side template injection vulnerability in Frappe ERPNext allows authenticated attackers to execute arbitrary template expressions that can read, write, and delete database records, send outbound requests, and send emails. This flaw enables attackers to manipulate the application's template rendering engine without proper input validation.","exploitability":"The vulnerability is relatively easy to exploit as it requires only an authenticated user with a common operational role; attackers can inject template expressions directly into message fields to execute arbitrary code in an unrestricted context.","blast_radius":"If exploited, this vulnerability could lead to full database access and manipulation, unauthorized outbound communications, and email spoofing across the ERPNext platform, affecting multiple business processes and data integrity.","remediation":"Upgrade to ERPNext version 15.119.1 or 16.32.0 to remediate this template injection vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["template-injection","database-access","remote-code-execution"],"model":"garnet-coder","analyzedAt":"2026-10-16T09:02:28.652Z"}}