PT-2026-107302 · Backstage · Backstage
CVE-2026-106505
·
Published
2026-10-06
·
Updated
2026-10-07
CVSS v3.1
7.7
High
| Vector | AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Backstage versions prior to 1.14.6
Backstage versions prior to 1.15.4
Description
The
@backstage/plugin-techdocs-node package contains a flaw in the techdocs backend that allows a bypass of the mkdocs configuration sanitizer. Users capable of committing changes to a repository using TechDocs can circumvent this sanitizer to execute arbitrary code on the TechDocs backend host during the documentation generation process.Recommendations
Update to version 1.14.6 or later.
Update to version 1.15.4 or later.
Exploit
Fix
Untrusted Search Path
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Backstage