CVEvulnerability

CVE-2026-106505

8.5 HIGH Published 2026-10-06 Modified 2026-10-09 Official page ↗
Status
Analyzed
Published
2026-10-06
Last modified
2026-10-09
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.7 HIGH — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
CVSS 3.1 ([email protected])
8.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-426, CWE-436

Description

Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by bypass of mkdocs configuration sanitizer in techdocs backend. Users with the ability to commit changes to a repository that uses TechDocs can circumvent the MkDocs configuration file sanitizer introduced in response to CVE-2026-25153 and execute arbitrary code on the TechDocs backend host during documentation generation. This issue is fixed in versions 1.14.6 and 1.15.4.

Affected configurations

• linuxfoundation backstage plugin-techdocs-node (< 1.14.6) • linuxfoundation backstage plugin-techdocs-node (>= 1.15.0 < 1.15.4) • linuxfoundation backstage (< 1.50.5) • linuxfoundation backstage (>= 1.51.1 < 1.54.6) • linuxfoundation backstage 1.51.0

Related

Weakness · CWE (2)

  • CWE-426 Untrusted Search Path weakness
  • CWE-436 Interpretation Conflict weakness

References