CVE-2026-33587 Remote Code Execution (RCE) via Server-Side Template Injection (SSTI)

Critical 9.2 Published 7 May 2026 Updated 7 May 2026

Attackers can execute arbitrary Python code and OS commands via Server-Side Template Injection in user-created transformations.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-33587?

CVE-2026-33587 is a critical code injection vulnerability in Open Notebook, published on 7 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the docker container via Server-Side Template Injection (SSTI) for user-created transformations.

Weakness: CWE-20

Which versions are affected by CVE-2026-33587?

It affects 1 product.

Products include Lfnovo Open-Notebook.

How do I fix CVE-2026-33587?

No fix has been published for CVE-2026-33587 yet. Limit exposure of the affected software until one is available.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2026-33587 being exploited?

There is no known exploitation of CVE-2026-33587 in the wild and no public exploit code.

Sources

Also known as GHSA-f35w-wx37-26q7, GHSA-jqjr-j3vj-vwq3.