{"id":"CVE-2026-33154","title":"dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection (CVE-2026-33154)","summary":"A flaw was found in dynaconf, a Python configuration management tool. This Server-Side Template Injection (SSTI) vulnerability occurs due to unsafe template evaluation in the @Jinja resolver when the jinja2 package is installed. A remote a…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"vendor","cwe":"CWE-917","vendor":"Red Hat","product":"Red Hat Ansible Automation Platform 2","affected":["ansible_automation_platform 2","update_infrastructure_4_for_cloud_providers","update_infrastructure 5","satellite_6_16_for_rhel 8","ansible_automation_platform_2_6_for_rhel 9","satellite_6_16_for_rhel 9","satellite_6_17_for_rhel 9","satellite_6_18_for_rhel 9","satellite_6_19_for_rhel 9","ansible_automation_platform 2.5","ansible_automation_platform 2.6"],"patched":["satellite_6_16_for_rhel 8","ansible_automation_platform_2_6_for_rhel 9","satellite_6_16_for_rhel 9","satellite_6_17_for_rhel 9","satellite_6_18_for_rhel 9","satellite_6_19_for_rhel 9","ansible_automation_platform 2.5","ansible_automation_platform 2.6"],"published":"2026-03-20","updated":"2026-10-02","sourceUpdated":"2026-10-02T17:37:02+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33154.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33154.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-33154"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2449774"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33154"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33154"},{"url":"https://github.com/dynaconf/dynaconf/commit/2fbb45ee36b8c0caa5b924fe19f3c1a5e8603fa7"},{"url":"https://github.com/dynaconf/dynaconf/releases/tag/3.2.13"},{"url":"https://github.com/dynaconf/dynaconf/security/advisories/GHSA-pxrr-hq57-q35p"},{"url":"https://access.redhat.com/errata/RHSA-2026:74506"},{"url":"https://access.redhat.com/errata/RHSA-2026:34160"},{"url":"https://access.redhat.com/errata/RHSA-2026:74505"},{"url":"https://access.redhat.com/errata/RHSA-2026:74504"},{"url":"https://access.redhat.com/errata/RHSA-2026:74503"},{"url":"https://access.redhat.com/errata/RHSA-2026:13553"},{"url":"https://access.redhat.com/errata/RHSA-2026:34374"},{"url":"https://access.redhat.com/errata/RHSA-2026:24866"},{"url":"https://access.redhat.com/errata/RHSA-2026:13545"},{"url":"https://github.com/dynaconf/dynaconf"}],"tags":["csaf","vex","red-hat","exploit-available","osv","pip"],"epss":0.00536,"epssPercentile":0.44982,"exploits":{"github":1,"githubRepos":["https://github.com/redyank/CVE-2026-33154"],"checkedAt":"2026-10-27T18:58:28.378Z"},"exploitAvailable":true,"aliases":["GHSA-pxrr-hq57-q35p","PYSEC-2026-2147"],"ecosystem":"pip","ingestedAt":"2026-07-13T18:58:01.733Z","slug":"CVE-2026-33154","body":"## Overview\n\nA flaw was found in dynaconf, a Python configuration management tool. This Server-Side Template Injection (SSTI) vulnerability occurs due to unsafe template evaluation in the @Jinja resolver when the jinja2 package is installed. A remote attacker could exploit this by embedding malicious template expressions in configuration values, which are then processed without a sandboxed environment. This could lead to arbitrary code execution on the affected system.\n\n## Vendor advisories\n\n- **RHSA-2026:74506** · Red Hat · fixed in: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9 · released 2026-10-01 · [advisory](https://access.redhat.com/errata/RHSA-2026:74506)\n- **RHSA-2026:34160** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.6 for RHEL 9 · released 2026-07-01 · [advisory](https://access.redhat.com/errata/RHSA-2026:34160)\n- **RHSA-2026:74505** · Red Hat · fixed in: Red Hat Satellite 6.17 for RHEL 9 · released 2026-10-01 · [advisory](https://access.redhat.com/errata/RHSA-2026:74505)\n- **RHSA-2026:74504** · Red Hat · fixed in: Red Hat Satellite 6.18 for RHEL 9 · released 2026-10-01 · [advisory](https://access.redhat.com/errata/RHSA-2026:74504)\n- **RHSA-2026:74503** · Red Hat · fixed in: Red Hat Satellite 6.19 for RHEL 9 · released 2026-10-01 · [advisory](https://access.redhat.com/errata/RHSA-2026:74503)\n- **RHSA-2026:13553** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.5 · released 2026-05-04 · [advisory](https://access.redhat.com/errata/RHSA-2026:13553)\n- **RHSA-2026:34374** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.6 · released 2026-07-01 · [advisory](https://access.redhat.com/errata/RHSA-2026:34374)\n- **RHSA-2026:24866** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.6 · released 2026-06-09 · [advisory](https://access.redhat.com/errata/RHSA-2026:24866)\n- **RHSA-2026:13545** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.6 · released 2026-05-04 · [advisory](https://access.redhat.com/errata/RHSA-2026:13545)\n- **Red Hat VEX** · Moderate · affected: Red Hat Ansible Automation Platform 2, Red Hat Update Infrastructure 4 for Cloud Providers, Red Hat Update Infrastructure 5 · no fix planned: Red Hat Ansible Automation Platform 2, Red Hat Update Infrastructure 4 for Cloud Providers, Red Hat Update Infrastructure 5 · updated 2026-10-02 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33154.json)\n\n**dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection** — rated Moderate by Red Hat. Released 2026-03-20, updated 2026-10-02.\n\nAffected:\n\n- Red Hat Ansible Automation Platform 2\n- Red Hat Update Infrastructure 4 for Cloud Providers\n- Red Hat Update Infrastructure 5\n\nFixed:\n\n- Red Hat Satellite 6.16 for RHEL 8\n- Red Hat Ansible Automation Platform 2.6 for RHEL 9\n- Red Hat Satellite 6.16 for RHEL 9\n- Red Hat Satellite 6.17 for RHEL 9\n- Red Hat Satellite 6.18 for RHEL 9\n- Red Hat Satellite 6.19 for RHEL 9\n- Red Hat Ansible Automation Platform 2.5\n- Red Hat Ansible Automation Platform 2.6\n\nNo fix planned:\n\n- Red Hat Ansible Automation Platform 2\n- Red Hat Update Infrastructure 4 for Cloud Providers\n- Red Hat Update Infrastructure 5\n\nNot affected:\n\n- Red Hat Satellite 6.16 for RHEL 8\n- Red Hat Ansible Automation Platform 2.6 for RHEL 9\n- Red Hat Satellite 6.16 for RHEL 9\n- Red Hat Satellite 6.17 for RHEL 9\n- Red Hat Satellite 6.18 for RHEL 9\n- Red Hat Satellite 6.19 for RHEL 9\n- Red Hat Ansible Automation Platform 2.5\n- Red Hat Ansible Automation Platform 2.6\n- Red Hat Update Infrastructure 5\n\n## Remediation\n\nBefore applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.16/html/updating_red_hat_satellite/index\n\nRelease Notes:\n\nProvisioning tokens are now required for all Operating System entries with Redhat family set. Attempts to download a unattended template without valid token will lead to “a provisioning token is required but a valid one was not provided” error.\n\nThis changed behavior will lead to inability to use Gener… https://access.redhat.com/errata/RHSA-2026:74506\nFor details on how to apply this update, refer to Ansible Automation Platform documentation. https://access.redhat.com/errata/RHSA-2026:34160\nBefore applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2026:74505\n\nWorkarounds / mitigations:\n\n- Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\n## Package advisory (CVE-2026-33154)\n\nAffected packages:\n\n- `dynaconf < 3.2.13`\n\nPatched in:\n\n- `dynaconf 3.2.13`\n\nSource: https://osv.dev/vulnerability/GHSA-pxrr-hq57-q35p","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":5102,"id":"CVE-2026-33154","ts":1788887248427,"field":"exploit_available","old":"false","new":"true"},{"seq":3985,"id":"CVE-2026-33154","ts":1788886364097,"field":"exploit_available","old":"true","new":"false"},{"seq":2800,"id":"CVE-2026-33154","ts":1788883030798,"field":"exploit_available","old":"false","new":"true"},{"seq":1829,"id":"CVE-2026-33154","ts":1788882433728,"field":"exploit_available","old":"true","new":"false"},{"seq":927,"id":"CVE-2026-33154","ts":1788881867454,"field":"exploit_available","old":"false","new":"true"}]}