CVE-2026-106556highCWE-184CWE-78

CVE-2026-106556: falha de alta gravidade em backstage

Backstage: Configuration bypass in TechDocs mkdocs.yml sanitization

Publicada em

18Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.7
probabilidade de exploração
—
exploração observada
nãonenhuma fonte reporta
Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by configuration bypass in techdocs mkdocs.yml sanitization. Insufficient validation of MkDocs configuration during TechDocs generation could allow an authenticated user who can register or modify documentation sources to execute arbitrary commands in the build environment. Impact is limited to resources accessible to the TechDocs backend or build container. This issue is fixed in versions 1.14.6 and 1.15.4.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Produtos afetados
@backstage · plugin-techdocs-nodebackstage · backstage
CVEs relacionadas — backstage

No mesmo produto, das mais perigosas para as menos.

CVE-2023-35926HIGHInsecure sandbox in Backstage Scaffolder pluginEPSS 1.9%CVE-2021-41151MEDIUMPath Traversal in @backstage/plugin-scaffolder-backendEPSS 1.3%CVE-2021-32662MEDIUMTechDocs mkdocs.yml path traversalEPSS 1.3%CVE-2021-32660MEDIUMTechDocs content sanitization bypassEPSS 1.3%CVE-2021-43783HIGHPath Traversal in @backstage/plugin-scaffolder-backendEPSS 1.2%CVE-2021-32661MEDIUMTechDocs object element script injectionEPSS 1.2%
Referências
https://github.com/backstage/backstage/commit/25125ee727a3de3418a8fa6a9e458cd5b73ecf26https://github.com/backstage/backstage/commit/b6d1aea0bef99b8dfec3c8746032474867ba677ahttps://github.com/backstage/backstage/releases/tag/v1.50.5https://github.com/backstage/backstage/releases/tag/v1.54.6https://github.com/backstage/backstage/security/advisories/GHSA-g2hj-v2j6-vfvg