CVE-2026-88064High· 8.8▾ TwilightBackstage is an open framework for building developer portals. Prior to 1.14.6 and from 1.15.0 until 1.15.4, the @backstage/plugin-techdocs-node package insufficiently validates mkdocs.yml supplied by an authenticated user who can regist…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 19.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.6%
Last analysed / modified upstream
0.6% → 1.2%
Backstage is an open framework for building developer portals. Prior to 1.14.6 and from 1.15.0 until 1.15.4, the @backstage/plugin-techdocs-node package insufficiently validates mkdocs.yml supplied by an authenticated user who can register or modify a TechDocs source. Unsafe Python YAML tags, markdown_extensions names and configuration, theme options, and extra_templates values can reach the documentation generator and cause unintended code execution. The resulting impact is limited to the files, credentials, network access, and other resources available to the TechDocs backend or build container. This issue is fixed in versions 1.14.6 and 1.15.4.
backstage_plugin-techdocs-node < 1.14.6backstage_plugin-techdocs-node >= 1.15.0, < 1.15.4backstage < 1.14.6backstage >= 1.15.0, < 1.15.4Upgrade past the affected range:
backstage_plugin-techdocs-node 1.15.4backstage 1.15.4Connected by shared product, vendor, weakness, or advisory.
CVE-2026-106509High· 7.7Backstage is an open framework for building developer portals
CVE-2026-106510High· 7.7Backstage is an open framework for building developer portals
CVE-2026-106505High· 7.7Backstage is an open framework for building developer portals
CVE-2026-106556High· 7.7Backstage is an open framework for building developer portals
CVE-2026-106507Medium· 5.3Backstage is an open framework for building developer portals
CVE-2026-106508Medium· 5.3Backstage is an open framework for building developer portals