{"id":"CVE-2024-56201","title":"jinja2: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201)","summary":"A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs …","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","cvssSource":"vendor","cwe":"CWE-150","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","affected":["openshift_lightspeed","ansible_automation_platform 1.2","enterprise_linux 6","enterprise_linux_ai_rhel_ai","openshift_container_platform 4","openshift_distributed_tracing 3","openstack_platform 18.0","ansible_automation_platform_2_4_for_rhel 8","ansible_automation_platform_2_5_for_rhel 8","quay v3","ansible_automation_platform_execution_environments","satellite_6_15_for_rhel 8","ansible_automation_platform_2_4_for_rhel 9","ansible_automation_platform_2_5_for_rhel 9","openstack_platform 17.1","openshift_container_platform 4.16","openshift_container_platform 4.17","openshift_container_platform 4.18","ironic_content_for_red_hat_openshift_container_platform 4.12","ironic_content_for_red_hat_openshift_container_platform 4.13","ironic_content_for_red_hat_openshift_container_platform 4.14","ironic_content_for_red_hat_openshift_container_platform 4.15","ironic_content_for_red_hat_openshift_container_platform 4.16","ironic_content_for_red_hat_openshift_container_platform 4.17","discovery_1_for_rhel 9","enterprise_linux_appstream_e4s_v_9_0","enterprise_linux_appstream_eus_v_9_2","enterprise_linux_appstream_eus_v_9_4","enterprise_linux_appstream_v_9","enterprise_linux_high_availability_e4s_v_9_0","enterprise_linux_high_availability_eus_v_9_2","enterprise_linux_high_availability_eus_v_9_4","enterprise_linux_high_availability_v_9","developer_hub_rhdh 1.4","developer_hub 1.5","openshift_ai 2.16","enterprise_linux_resilientstorage_e4s_v_9_0","enterprise_linux_resilient_storage_eus_v_9_2","enterprise_linux_resilient_storage_eus_v_9_4","enterprise_linux_resilient_storage_v_9"],"patched":["ansible_automation_platform_2_4_for_rhel 8","ansible_automation_platform_2_5_for_rhel 8","quay v3","ansible_automation_platform_execution_environments","satellite_6_15_for_rhel 8","ansible_automation_platform_2_4_for_rhel 9","ansible_automation_platform_2_5_for_rhel 9","openstack_platform 17.1","openshift_container_platform 4.16","openshift_container_platform 4.17","openshift_container_platform 4.18","ironic_content_for_red_hat_openshift_container_platform 4.12","ironic_content_for_red_hat_openshift_container_platform 4.13","ironic_content_for_red_hat_openshift_container_platform 4.14","ironic_content_for_red_hat_openshift_container_platform 4.15","ironic_content_for_red_hat_openshift_container_platform 4.16","ironic_content_for_red_hat_openshift_container_platform 4.17","discovery_1_for_rhel 9","enterprise_linux_appstream_e4s_v_9_0","enterprise_linux_appstream_eus_v_9_2","enterprise_linux_appstream_eus_v_9_4","enterprise_linux_appstream_v_9","enterprise_linux_high_availability_e4s_v_9_0","enterprise_linux_high_availability_eus_v_9_2","enterprise_linux_high_availability_eus_v_9_4","enterprise_linux_high_availability_v_9","developer_hub_rhdh 1.4","developer_hub 1.5","openshift_ai 2.16","enterprise_linux_resilientstorage_e4s_v_9_0","enterprise_linux_resilient_storage_eus_v_9_2","enterprise_linux_resilient_storage_eus_v_9_4","enterprise_linux_resilient_storage_v_9"],"published":"2024-12-23","updated":"2026-10-15","sourceUpdated":"2026-10-15T11:08:50+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-56201.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-56201.json"},{"url":"https://access.redhat.com/security/cve/CVE-2024-56201"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2333854"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-56201"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56201"},{"url":"https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f"},{"url":"https://github.com/pallets/jinja/issues/1792"},{"url":"https://github.com/pallets/jinja/releases/tag/3.1.5"},{"url":"https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699"},{"url":"https://access.redhat.com/errata/RHSA-2025:0721"},{"url":"https://access.redhat.com/errata/RHSA-2025:0722"},{"url":"https://access.redhat.com/errata/RHSA-2025:0777"},{"url":"https://access.redhat.com/errata/RHSA-2025:0341"},{"url":"https://access.redhat.com/errata/RHBA-2025:1077"},{"url":"https://access.redhat.com/errata/RHBA-2025:0301"},{"url":"https://access.redhat.com/errata/RHBA-2025:1597"},{"url":"https://access.redhat.com/errata/RHSA-2025:1101"},{"url":"https://access.redhat.com/errata/RHSA-2025:0753"},{"url":"https://access.redhat.com/errata/RHSA-2025:3491"},{"url":"https://access.redhat.com/errata/RHSA-2025:1861"},{"url":"https://access.redhat.com/errata/RHSA-2025:1123"},{"url":"https://access.redhat.com/errata/RHSA-2025:0875"},{"url":"https://access.redhat.com/errata/RHSA-2024:6121"},{"url":"https://access.redhat.com/errata/RHSA-2025:0834"},{"url":"https://access.redhat.com/errata/RHSA-2025:1118"},{"url":"https://access.redhat.com/errata/RHSA-2025:0842"},{"url":"https://access.redhat.com/errata/RHSA-2025:1130"},{"url":"https://access.redhat.com/errata/RHSA-2025:0830"},{"url":"https://access.redhat.com/errata/RHSA-2025:0656"},{"url":"https://access.redhat.com/errata/RHSA-2025:1249"},{"url":"https://github.com/pallets/jinja"}],"tags":["csaf","vex","red-hat","osv","pip"],"epss":0.00307,"epssPercentile":0.2337,"aliases":["GHSA-gmj6-6f8f-6699","PYSEC-2026-1472"],"ecosystem":"pip","scores":{"vendor":7.3,"osv":8.8},"ingestedAt":"2026-07-08T18:25:49.740Z","slug":"CVE-2024-56201","body":"## Overview\n\nA flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs to be able to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications that execute untrusted templates where the template author can also choose the template filename.\n\n## Vendor advisories\n\n- **RHSA-2025:0721** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.4 for RHEL 8, Red Hat Ansible Automation Platform 2.4 for RHEL 9 · released 2025-01-27 · [advisory](https://access.redhat.com/errata/RHSA-2025:0721)\n- **RHSA-2025:0722** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.4 for RHEL 8 · released 2025-01-27 · [advisory](https://access.redhat.com/errata/RHSA-2025:0722)\n- **RHSA-2025:0777** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9 · released 2025-01-28 · [advisory](https://access.redhat.com/errata/RHSA-2025:0777)\n- **RHSA-2025:0341** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.5 for RHEL 8 · released 2025-01-15 · [advisory](https://access.redhat.com/errata/RHSA-2025:0341)\n- **RHBA-2025:1077** · Red Hat · fixed in: Quay v3 · released 2025-02-06 · [advisory](https://access.redhat.com/errata/RHBA-2025:1077)\n- **RHBA-2025:0301** · Red Hat · fixed in: Quay v3 · released 2025-01-20 · [advisory](https://access.redhat.com/errata/RHBA-2025:0301)\n- **RHBA-2025:1597** · Red Hat · fixed in: Quay v3 · released 2025-02-24 · [advisory](https://access.redhat.com/errata/RHBA-2025:1597)\n- **RHSA-2025:1101** · Red Hat · fixed in: Ansible Automation Platform Execution Environments · released 2025-02-05 · [advisory](https://access.redhat.com/errata/RHSA-2025:1101)\n- **RHSA-2025:0753** · Red Hat · fixed in: Ansible Automation Platform Execution Environments · released 2025-01-28 · [advisory](https://access.redhat.com/errata/RHSA-2025:0753)\n- **RHSA-2025:3491** · Red Hat · fixed in: Red Hat Satellite 6.15 for RHEL 8 · released 2025-04-01 · [advisory](https://access.redhat.com/errata/RHSA-2025:3491)\n- **RHSA-2025:1861** · Red Hat · fixed in: Red Hat OpenStack Platform 17.1 · released 2025-02-25 · [advisory](https://access.redhat.com/errata/RHSA-2025:1861)\n- **Red Hat VEX** · Important · affected: OpenShift Lightspeed, Red Hat Ansible Automation Platform 1.2, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux AI (RHEL AI), Red Hat OpenShift Container Platform 4, Red Hat OpenShift distributed tracing 3, … · no fix planned: Red Hat Enterprise Linux 6, Red Hat Ansible Automation Platform 1.2, Red Hat Enterprise Linux AI (RHEL AI), Red Hat OpenShift Container Platform 4, … · updated 2026-10-15 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-56201.json)\n\n**jinja2: Jinja has a sandbox breakout through malicious filenames** — rated Important by Red Hat. Released 2024-12-23, updated 2026-10-15.\n\nAffected:\n\n- OpenShift Lightspeed\n- Red Hat Ansible Automation Platform 1.2\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux AI (RHEL AI)\n- Red Hat OpenShift Container Platform 4\n- Red Hat OpenShift distributed tracing 3\n- Red Hat OpenStack Platform 18.0\n\nFixed:\n\n- Red Hat Ansible Automation Platform 2.4 for RHEL 8\n- Red Hat Ansible Automation Platform 2.5 for RHEL 8\n- Quay v3\n- Ansible Automation Platform Execution Environments\n- Red Hat Satellite 6.15 for RHEL 8\n- Red Hat Ansible Automation Platform 2.4 for RHEL 9\n- Red Hat Ansible Automation Platform 2.5 for RHEL 9\n- Red Hat OpenStack Platform 17.1\n- Red Hat OpenShift Container Platform 4.16\n- Red Hat OpenShift Container Platform 4.17\n- Red Hat OpenShift Container Platform 4.18\n- Ironic content for Red Hat OpenShift Container Platform 4.12\n- Ironic content for Red Hat OpenShift Container Platform 4.13\n- Ironic content for Red Hat OpenShift Container Platform 4.14\n- Ironic content for Red Hat OpenShift Container Platform 4.15\n- Ironic content for Red Hat OpenShift Container Platform 4.16\n- Ironic content for Red Hat OpenShift Container Platform 4.17\n- Discovery 1 for RHEL 9\n- Red Hat Enterprise Linux AppStream E4S (v.9.0)\n- Red Hat Enterprise Linux AppStream EUS (v.9.2)\n- Red Hat Enterprise Linux AppStream EUS (v.9.4)\n- Red Hat Enterprise Linux AppStream (v. 9)\n- Red Hat Enterprise Linux High Availability E4S (v.9.0)\n- Red Hat Enterprise Linux High Availability EUS (v.9.2)\n- Red Hat Enterprise Linux High Availability EUS (v.9.4)\n- Red Hat Enterprise Linux High Availability (v. 9)\n- Red Hat Developer Hub (RHDH) 1.4\n- Red Hat Developer Hub 1.5\n- Red Hat OpenShift AI 2.16\n- Red Hat Enterprise Linux ResilientStorage E4S (v.9.0)\n- Red Hat Enterprise Linux Resilient Storage EUS (v.9.2)\n- Red Hat Enterprise Linux Resilient Storage EUS (v.9.4)\n- Red Hat Enterprise Linux Resilient Storage (v. 9)\n\nNo fix planned:\n\n- Red Hat Enterprise Linux 6\n- Red Hat Ansible Automation Platform 1.2\n- Red Hat Enterprise Linux AI (RHEL AI)\n- Red Hat OpenShift Container Platform 4\n- Red Hat OpenShift distributed tracing 3\n- OpenShift Lightspeed\n- Red Hat OpenStack Platform 18.0\n\nNot affected:\n\n- Red Hat Ansible Automation Platform 2.4 for RHEL 8\n- Red Hat Ansible Automation Platform 2.5 for RHEL 8\n- Red Hat OpenShift Container Platform 4.12\n- Red Hat OpenShift Container Platform 4.13\n- Red Hat OpenShift Container Platform 4.14\n- Red Hat OpenShift Container Platform 4.15\n- Red Hat OpenShift Container Platform 4.16\n- Red Hat OpenShift Container Platform 4.17\n- Ansible Automation Platform Execution Environments\n- Red Hat Satellite 6.15 for RHEL 8\n\n## Remediation\n\nRed Hat Ansible Automation Platform https://access.redhat.com/errata/RHSA-2025:0721\nRed Hat Ansible Automation Platform https://access.redhat.com/errata/RHSA-2025:0722\nRed Hat Ansible Automation Platform https://access.redhat.com/errata/RHSA-2025:0777\n\nWorkarounds / mitigations:\n\n- To mitigate this vulnerabilty restrict user-controlled template filenames, ensuring they follow a predefined templates.\n\n## Package advisory (CVE-2024-56201)\n\nAffected packages:\n\n- `jinja2 >= 3.0.0, < 3.1.5`\n\nPatched in:\n\n- `jinja2 3.1.5`\n\nSource: https://osv.dev/vulnerability/GHSA-gmj6-6f8f-6699","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":220101,"id":"CVE-2024-56201","ts":1791978538073,"field":"cvss","old":"8.8","new":"7.3"},{"seq":201398,"id":"CVE-2024-56201","ts":1789399397756,"field":"cvss","old":"7.3","new":"8.8"},{"seq":200133,"id":"CVE-2024-56201","ts":1789396745534,"field":"cvss","old":"8.8","new":"7.3"},{"seq":196929,"id":"CVE-2024-56201","ts":1789384237889,"field":"cvss","old":"7.3","new":"8.8"},{"seq":195856,"id":"CVE-2024-56201","ts":1789383180092,"field":"cvss","old":"8.8","new":"7.3"},{"seq":194784,"id":"CVE-2024-56201","ts":1789380216168,"field":"cvss","old":"7.3","new":"8.8"},{"seq":193572,"id":"CVE-2024-56201","ts":1789378046930,"field":"cvss","old":"8.8","new":"7.3"},{"seq":192358,"id":"CVE-2024-56201","ts":1789376135168,"field":"cvss","old":"7.3","new":"8.8"},{"seq":191146,"id":"CVE-2024-56201","ts":1789372902498,"field":"cvss","old":"8.8","new":"7.3"},{"seq":189930,"id":"CVE-2024-56201","ts":1789369055633,"field":"cvss","old":"7.3","new":"8.8"},{"seq":188718,"id":"CVE-2024-56201","ts":1789367884351,"field":"cvss","old":"8.8","new":"7.3"},{"seq":187500,"id":"CVE-2024-56201","ts":1789364900436,"field":"cvss","old":"7.3","new":"8.8"},{"seq":186288,"id":"CVE-2024-56201","ts":1789362821822,"field":"cvss","old":"8.8","new":"7.3"},{"seq":185073,"id":"CVE-2024-56201","ts":1789360887982,"field":"cvss","old":"7.3","new":"8.8"},{"seq":183861,"id":"CVE-2024-56201","ts":1789357728131,"field":"cvss","old":"8.8","new":"7.3"},{"seq":182113,"id":"CVE-2024-56201","ts":1789354022516,"field":"cvss","old":"7.3","new":"8.8"},{"seq":180906,"id":"CVE-2024-56201","ts":1789352766402,"field":"cvss","old":"8.8","new":"7.3"},{"seq":179699,"id":"CVE-2024-56201","ts":1789349895676,"field":"cvss","old":"7.3","new":"8.8"},{"seq":178492,"id":"CVE-2024-56201","ts":1789347582871,"field":"cvss","old":"8.8","new":"7.3"},{"seq":177285,"id":"CVE-2024-56201","ts":1789346086051,"field":"cvss","old":"7.3","new":"8.8"},{"seq":176078,"id":"CVE-2024-56201","ts":1789342564240,"field":"cvss","old":"8.8","new":"7.3"},{"seq":175864,"id":"CVE-2024-56201","ts":1789342170512,"field":"cvss","old":"7.3","new":"8.8"},{"seq":175402,"id":"CVE-2024-56201","ts":1789338180669,"field":"cvss","old":"8.8","new":"7.3"},{"seq":174197,"id":"CVE-2024-56201","ts":1789334523027,"field":"cvss","old":"7.3","new":"8.8"},{"seq":170620,"id":"CVE-2024-56201","ts":1789328173556,"field":"cvss","old":"8.8","new":"7.3"},{"seq":169415,"id":"CVE-2024-56201","ts":1789326784798,"field":"cvss","old":"7.3","new":"8.8"},{"seq":168210,"id":"CVE-2024-56201","ts":1789323208694,"field":"cvss","old":"8.8","new":"7.3"},{"seq":167005,"id":"CVE-2024-56201","ts":1789319270374,"field":"cvss","old":"7.3","new":"8.8"},{"seq":165800,"id":"CVE-2024-56201","ts":1789318035315,"field":"cvss","old":"8.8","new":"7.3"},{"seq":164595,"id":"CVE-2024-56201","ts":1789315445096,"field":"cvss","old":"7.3","new":"8.8"},{"seq":163390,"id":"CVE-2024-56201","ts":1789313088152,"field":"cvss","old":"8.8","new":"7.3"},{"seq":162185,"id":"CVE-2024-56201","ts":1789311633307,"field":"cvss","old":"7.3","new":"8.8"},{"seq":160980,"id":"CVE-2024-56201","ts":1789308066947,"field":"cvss","old":"8.8","new":"7.3"},{"seq":160946,"id":"CVE-2024-56201","ts":1789307840392,"field":"cvss","old":"7.3","new":"8.8"},{"seq":160298,"id":"CVE-2024-56201","ts":1789303834810,"field":"cvss","old":"8.8","new":"7.3"},{"seq":159359,"id":"CVE-2024-56201","ts":1789300309189,"field":"cvss","old":"7.3","new":"8.8"},{"seq":158323,"id":"CVE-2024-56201","ts":1789299103699,"field":"cvss","old":"8.8","new":"7.3"},{"seq":157287,"id":"CVE-2024-56201","ts":1789296389381,"field":"cvss","old":"7.3","new":"8.8"},{"seq":156082,"id":"CVE-2024-56201","ts":1789294207581,"field":"cvss","old":"8.8","new":"7.3"},{"seq":154877,"id":"CVE-2024-56201","ts":1789292543313,"field":"cvss","old":"7.3","new":"8.8"},{"seq":153672,"id":"CVE-2024-56201","ts":1789289131698,"field":"cvss","old":"8.8","new":"7.3"},{"seq":152884,"id":"CVE-2024-56201","ts":1789285013147,"field":"cvss","old":"7.3","new":"8.8"},{"seq":152128,"id":"CVE-2024-56201","ts":1789280735287,"field":"cvss","old":"8.8","new":"7.3"},{"seq":151089,"id":"CVE-2024-56201","ts":1789277337019,"field":"cvss","old":"7.3","new":"8.8"},{"seq":150056,"id":"CVE-2024-56201","ts":1789275724220,"field":"cvss","old":"8.8","new":"7.3"},{"seq":149023,"id":"CVE-2024-56201","ts":1789273535487,"field":"cvss","old":"7.3","new":"8.8"},{"seq":147818,"id":"CVE-2024-56201","ts":1789270685386,"field":"cvss","old":"8.8","new":"7.3"},{"seq":145858,"id":"CVE-2024-56201","ts":1789269117297,"field":"cvss","old":"7.3","new":"8.8"},{"seq":144762,"id":"CVE-2024-56201","ts":1789265974156,"field":"cvss","old":"8.8","new":"7.3"},{"seq":143666,"id":"CVE-2024-56201","ts":1789262346239,"field":"cvss","old":"7.3","new":"8.8"}]}