{"history":[{"alert":0,"cve":"CVE-2026-44209","id":23436,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.00423, \"percentile\": 0.37109}"},{"alert":0,"cve":"CVE-2026-44209","id":20756,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.00423, \"percentile\": 0.36949}"},{"alert":0,"cve":"CVE-2026-44209","id":18757,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.00423, \"percentile\": 0.36908}"},{"alert":0,"cve":"CVE-2026-44209","id":16828,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.00423, \"percentile\": 0.36891}"},{"alert":0,"cve":"CVE-2026-44209","id":14806,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.00423, \"percentile\": 0.36872}"},{"alert":0,"cve":"CVE-2026-44209","id":12593,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.00423, \"percentile\": 0.3682}"},{"alert":0,"cve":"CVE-2026-44209","id":10761,"kind":"epss","observed_at":1793960400,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.00423, \"percentile\": 0.368}"},{"alert":1,"cve":"CVE-2026-44209","id":10640,"kind":"cna","observed_at":1793960400,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2026-44209\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2026-05-28T14:07:18.330651Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-05-28T14:07:44.481Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"exploit\"], \"url\": \"https://github.com/masci/banks/security/advisories/GHSA-gphh-9q3h-jgpp\"}], \"title\": \"CISA ADP Vulnrichment\"}, {\"affected\": [{\"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"cpes\": [\"cpe:/a:redhat:exploit_intelligence:0\"], \"defaultStatus\": \"affected\", \"packageName\": \"exploit-intelligence-tech-preview/vulnerability-analysis-rhel9\", \"product\": \"Exploit Intelligence\", \"vendor\": \"Red Hat\"}, {\"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"defaultStatus\": \"unaffected\", \"packageName\": \"openshift-lightspeed/lightspeed-ocp-rag-rhel9\", \"product\": \"OpenShift Lightspeed\", \"vendor\": \"Red Hat\"}, {\"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"defaultStatus\": \"unaffected\", \"packageName\": \"openshift-lightspeed/lightspeed-service-api-rhel9\", \"product\": \"OpenShift Lightspeed\", \"vendor\": \"Red Hat\"}, {\"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"defaultStatus\": \"unaffected\", \"packageName\": \"openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9\", \"product\": \"OpenShift Lightspeed\", \"vendor\": \"Red Hat\"}, {\"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"defaultStatus\": \"affected\", \"packageName\": \"ansible-automation-platform-25/lightspeed-chatbot-rhel8\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"vendor\": \"Red Hat\"}], \"datePublic\": \"2026-05-26T20:46:56.002Z\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in banks. This vulnerability, known as Server-Side Template Injection (SSTI), allows a remote attacker to achieve Remote Code Execution (RCE) on the host system. This occurs when applications using banks pass user-supplied strings directly as template arguments to the Prompt() function, which then renders these templates in an unsandboxed environment.\"}], \"metrics\": [{\"other\": {\"content\": {\"namespace\": \"https://access.redhat.com/security/updates/classification/\", \"value\": \"Important\"}, \"type\": \"Red Hat severity rating\"}}, {\"cvssV3_1\": {\"attackComplexity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"REQUIRED\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}, \"format\": \"CVSS\"}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-917\", \"description\": \"Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-07-24T12:05:31.563Z\", \"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\"}, \"references\": [{\"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"], \"url\": \"https://access.redhat.com/security/cve/CVE-2026-44209\"}, {\"name\": \"RHBZ#2481713\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"], \"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2481713\"}, {\"tags\": [\"x_sadp-csaf-vex\"], \"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44209.json\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-26T22:01:09.917Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-05-26T20:46:56.002Z\", \"value\": \"Made public.\"}], \"title\": \"banks: banks: Remote Code Execution via Server-Side Template Injection\", \"workarounds\": [{\"lang\": \"en\", \"value\": \"To mitigate this issue, applications utilizing the `banks` library should avoid passing user-controlled data into `Prompt()` sink. This prevents malicious input from being interpreted as template code, thereby reducing the risk of Server-Side Template Injection and subsequent remote code execution. Recommended to update to patched version.\"}], \"x_adpType\": \"supplier\", \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}}], \"cna\": {\"affected\": [{\"product\": \"banks\", \"vendor\": \"masci\", \"versions\": [{\"status\": \"affected\", \"version\": \"< 2.4.2\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Banks generates meaningful LLM prompts using a template language that makes sense. Prior to 2.4.2, banks uses jinja2.Environment() (unsandboxed) to render prompt templates. Applications that pass user-supplied strings as the template argument to Prompt() are vulnerable to Server-Side Template Injection (SSTI), which can lead to Remote Code Execution (RCE) on the host system. This vulnerability is fixed in 2.4.2.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"REQUIRED\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-1336\", \"description\": \"CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-05-26T20:46:56.002Z\", \"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\"}, \"references\": [{\"name\": \"https://github.com/masci/banks/security/advisories/GHSA-gphh-9q3h-jgpp\", \"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://github.com/masci/banks/security/advisories/GHSA-gphh-9q3h-jgpp\"}, {\"name\": \"https://github.com/masci/banks/pull/74\", \"tags\": [\"x_refsource_MISC\"], \"url\": \"https://github.com/masci/banks/pull/74\"}], \"source\": {\"advisory\": \"GHSA-gphh-9q3h-jgpp\", \"discovery\": \"UNKNOWN\"}, \"title\": \"Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI\"}}, \"cveMetadata\": {\"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"assignerShortName\": \"GitHub_M\", \"cveId\": \"CVE-2026-44209\", \"datePublished\": \"2026-05-26T20:46:56.002Z\", \"dateReserved\": \"2026-05-05T15:13:47.571Z\", \"dateUpdated\": \"2026-07-24T12:05:31.563Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"}],"record":{"affected":[{"product":"banks","vendor":"masci","versions":[{"status":"affected","version":"< 2.4.2"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-44209","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2026-05-28T14:07:18.330651Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-05-28T14:07:44.481Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["exploit"],"url":"https://github.com/masci/banks/security/advisories/GHSA-gphh-9q3h-jgpp"}],"title":"CISA ADP Vulnrichment"},{"affected":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:exploit_intelligence:0"],"defaultStatus":"affected","packageName":"exploit-intelligence-tech-preview/vulnerability-analysis-rhel9","product":"Exploit Intelligence","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_lightspeed"],"defaultStatus":"unaffected","packageName":"openshift-lightspeed/lightspeed-ocp-rag-rhel9","product":"OpenShift Lightspeed","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_lightspeed"],"defaultStatus":"unaffected","packageName":"openshift-lightspeed/lightspeed-service-api-rhel9","product":"OpenShift Lightspeed","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift_lightspeed"],"defaultStatus":"unaffected","packageName":"openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9","product":"OpenShift Lightspeed","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:ansible_automation_platform:2"],"defaultStatus":"affected","packageName":"ansible-automation-platform-25/lightspeed-chatbot-rhel8","product":"Red Hat Ansible Automation Platform 2","vendor":"Red Hat"}],"datePublic":"2026-05-26T20:46:56.002Z","descriptions":[{"lang":"en","value":"A flaw was found in banks. This vulnerability, known as Server-Side Template Injection (SSTI), allows a remote attacker to achieve Remote Code Execution (RCE) on the host system. This occurs when applications using banks pass user-supplied strings directly as template arguments to the Prompt() function, which then renders these templates in an unsandboxed environment."}],"metrics":[{"other":{"content":{"namespace":"https://access.redhat.com/security/updates/classification/","value":"Important"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-917","description":"Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-07-24T12:05:31.563Z","orgId":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","shortName":"redhat-SADP"},"references":[{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-44209"},{"name":"RHBZ#2481713","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2481713"},{"tags":["x_sadp-csaf-vex"],"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44209.json"}],"timeline":[{"lang":"en","time":"2026-05-26T22:01:09.917Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-05-26T20:46:56.002Z","value":"Made public."}],"title":"banks: banks: Remote Code Execution via Server-Side Template Injection","workarounds":[{"lang":"en","value":"To mitigate this issue, applications utilizing the `banks` library should avoid passing user-controlled data into `Prompt()` sink. This prevents malicious input from being interpreted as template code, thereby reducing the risk of Server-Side Template Injection and subsequent remote code execution. Recommended to update to patched version."}],"x_adpType":"supplier","x_generator":{"engine":"sadp-cli 1.0.0"}}],"cna":{"affected":[{"product":"banks","vendor":"masci","versions":[{"status":"affected","version":"< 2.4.2"}]}],"descriptions":[{"lang":"en","value":"Banks generates meaningful LLM prompts using a template language that makes sense. Prior to 2.4.2, banks uses jinja2.Environment() (unsandboxed) to render prompt templates. Applications that pass user-supplied strings as the template argument to Prompt() are vulnerable to Server-Side Template Injection (SSTI), which can lead to Remote Code Execution (RCE) on the host system. This vulnerability is fixed in 2.4.2."}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1336","description":"CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-05-26T20:46:56.002Z","orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M"},"references":[{"name":"https://github.com/masci/banks/security/advisories/GHSA-gphh-9q3h-jgpp","tags":["x_refsource_CONFIRM"],"url":"https://github.com/masci/banks/security/advisories/GHSA-gphh-9q3h-jgpp"},{"name":"https://github.com/masci/banks/pull/74","tags":["x_refsource_MISC"],"url":"https://github.com/masci/banks/pull/74"}],"source":{"advisory":"GHSA-gphh-9q3h-jgpp","discovery":"UNKNOWN"},"title":"Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI"}},"cveMetadata":{"assignerOrgId":"a0819718-46f1-4df5-94e2-005712e83aaa","assignerShortName":"GitHub_M","cveId":"CVE-2026-44209","datePublished":"2026-05-26T20:46:56.002Z","dateReserved":"2026-05-05T15:13:47.571Z","dateUpdated":"2026-07-24T12:05:31.563Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794457201,"cve":"CVE-2026-44209","description":"Banks generates meaningful LLM prompts using a template language that makes sense. Prior to 2.4.2, banks uses jinja2.Environment() (unsandboxed) to render prompt templates. Applications that pass user-supplied strings as the template argument to Prompt() are vulnerable to Server-Side Template Injection (SSTI), which can lead to Remote Code Execution (RCE) on the host system. This vulnerability is fixed in 2.4.2.","epss":{"date":"2026-11-12","epss":0.00423,"percentile":0.37109},"epss_checked":1794522003,"first_seen":1793944804,"kev":null,"kev_checked":1794522003,"products":"masci banks","references":["https://github.com/masci/banks/security/advisories/GHSA-gphh-9q3h-jgpp","https://github.com/masci/banks/pull/74","https://access.redhat.com/security/cve/CVE-2026-44209","https://bugzilla.redhat.com/show_bug.cgi?id=2481713","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44209.json"],"score":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"GitHub_M","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://github.com/advisories/GHSA-64vx-6h2c-rjh7","id":198,"publisher":"GitHub Advisory Database","title":"Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE"}]}