7.7Hoch
CVE-2026-29186@backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution
Beschreibung
Backstage is an open framework for building developer portals. Prior to version 1.14.3, this is a configuration bypass vulnerability that enables arbitrary code execution. The @backstage/plugin-techdocs-node package uses an allowlist to filter dangerous MkDocs configuration keys during the documentation build process. A gap in this allowlist allows attackers to craft an mkdocs.yml that causes arbitrary Python code execution, completely bypassing TechDocs' security controls. This issue has been patched in version 1.14.3.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| backstage | backstage | < 1.14.3 | |
| linuxfoundation | backstage plugin-techdocs-node | < 1.14.3 | |
| Red Hat | Red Hat Developer Hub 1.8 | all versions | |
| Red Hat | Red Hat Developer Hub 1.9 | all versions | |
| Red Hat | Self-service automation portal 2 | all versions | |
| rhdh | 1.8 | — | |
| rhdh | 1.9 | — |
Referenzen und Patches
- https://github.com/backstage/backstage/security/advisories/GHSA-928r-fm4v-mvrw Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:13826
- https://access.redhat.com/errata/RHSA-2026:9742
- https://access.redhat.com/security/cve/CVE-2026-29186
- https://bugzilla.redhat.com/show_bug.cgi?id=2445480
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29186.json
CPE-Treffer (NVD) (1)
cpe:2.3:a:linuxfoundation:backstage_plugin-techdocs-node:*:*:*:*:*:*:*:*< 1.14.3