{"id":"CVE-2026-41646","sourceIdentifier":"security-advisories@github.com","published":"2026-05-08T04:16:18.383","lastModified":"2026-10-26T00:10:00.150","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From version 3.0.0 to before version 3.8.0, a vulnerability in Nuclei's JavaScript protocol runtime allows JavaScript templates to read local .js and .json files through the require() function, bypassing the default local file access restriction. This issue has been patched in version 3.8.0."},{"lang":"es","value":"Nuclei es un escáner de vulnerabilidades construido sobre un DSL simple basado en YAML. Desde la versión 3.0.0 hasta antes de la versión 3.8.0, una vulnerabilidad en el tiempo de ejecución del protocolo JavaScript de Nuclei permite que las plantillas de JavaScript lean archivos .js y .json locales a través de la función require(), eludiendo la restricción predeterminada de acceso a archivos locales. Este problema ha sido parcheado en la versión 3.8.0."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"projectdiscovery","product":"nuclei","versions":[{"version":">= 3.0.0, < 3.8.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","baseScore":5.5,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-08T14:11:12.263139Z","id":"CVE-2026-41646","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:projectdiscovery:nuclei:*:*:*:*:*:go:*:*","versionStartIncluding":"3.0.0","versionEndExcluding":"3.8.0","matchCriteriaId":"9E442141-1965-481A-BE82-B6DC11B58EAC"}]}]}],"references":[{"url":"https://github.com/projectdiscovery/nuclei/commit/6f2ade6a9b427c284c15a43445f9c7f055e60e5d","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/projectdiscovery/nuclei/pull/7332","source":"security-advisories@github.com","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/projectdiscovery/nuclei/security/advisories/GHSA-29rg-wmcw-hpf4","source":"security-advisories@github.com","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"https://github.com/projectdiscovery/nuclei/pull/7332","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Issue Tracking","Patch"]}]}