← Database

CVE-2026-123198

CRITICAL CVSS: 9.8 Published: 2026-11-05 Modified: 2026-11-05

Description

LMFDB before commit 01829bd contains a server-side template injection vulnerability in the render_knowl function that allows unauthenticated attackers to inject Jinja expressions via request parameters. Attackers can supply crafted query-string values or 'content' data to /knowledge/render/ to reach Python builtins and execute operating system commands as the web application account.

Affected Platforms

Unknown

Weakness Type

CWE-1336

References