CVE-2026-76804

Name of the Vulnerable Software and Affected Versions Nuclei versions 3.0.0 through 3.9.9

Description The workflow template loading path fails to enforce the -file capability gate when resolving templates using the file: protocol referenced by a workflow. This allows an untrusted, unsigned workflow to load a file-protocol template and read local files from the scanner host, bypassing the default security restriction that requires the -file flag to be explicitly enabled. This issue affects CLI users executing workflows via the -w flag and SDK integrations that accept end-user workflows while relying on default file-access restrictions.

Recommendations Update to version 3.10.0. Avoid running workflows from unverified sources.