ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-91925

Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Engine

CVSS 4.0 8.7 HIGHCVSS 3.1 8.8 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-91925

Published

Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs with Jinja2 payloads in queue, namespace, conditions, presets, or dependencies fields to execute operating system commands in the scheduler process context, exposing database credentials and service tokens.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-91925

Published

polyaxon

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "polyaxon",
                    "product": "polyaxon",
                    "defaultStatus": "unaffected",
                    "packageURL": "pkg:pypi/polyaxon",
                    "versions": [
                        {
                            "version": "0",
                            "lessThanOrEqual": "2.16.4",
                            "status": "affected",
                            "versionType": "semver"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON