CVE-2026-48026 lakeFS vulnerable to stored XSS in rendered markdown previews via raw HTML
Attackers with write access can inject malicious scripts into markdown files, executing them in other users' sessions to steal data or take over accounts.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-48026?
CVE-2026-48026 is a high-severity cross-site scripting vulnerability in treeverse lakeFS, published on 7 Aug 2026. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to version 1.81.1 of the open source edition and 1.84.0 of the enterprise edition, lakeFS Web UI renders markdown files from repository objects without sanitizing the resulting HTML. A user with write access to any repository branch can commit a `.md` object containing arbitrary HTML/JavaScript. Any other user who opens that object, or who navigates to a repository or directory containing a malicious `README.md`, executes the attacker-supplied script in their own authenticated session. lakeFS fixes the issue in v1.81.1 and lakeFS Enterprise fixes the issue in in v1.84.0. Enterprise customers using older versions can temporarily disable Markdown rendering by adding YAML to their config. No workaround exists for OSS release. Users are advised to upgrade to the latest version for both lakeFS and lakeFS-Enterprise.
Weakness: CWE-79
Which versions are affected by CVE-2026-48026?
How do I fix CVE-2026-48026?
No fix has been published for CVE-2026-48026 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2026-48026 being exploited?
There is no known exploitation of CVE-2026-48026 in the wild and no public exploit code.
Sources
Also known as GHSA-c2r5-5j4w-2xff.