CVE-2026-2969
This manipulation of the argument Prompt causes improper neutralization of special elements used in a template engine.
Does this matter?
Lower severity and a low EPSS score (0.69%). Track it; it rarely justifies an emergency change on its own.
Description
A flaw has been found in datapizza-labs datapizza-ai 0.0.2. Affected is the function ChatPromptTemplate of the file datapizza-ai-core/datapizza/modules/prompt/prompt.py of the component Jinja2 Template Handler. This manipulation of the argument Prompt causes improper neutralization of special elements used in a template engine. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
- CVSS 4.0
- 2.0 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.69% probability · 51th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-791, CWE-1336
- Affected
- datapizza/datapizza ai
- Source
- cna@vuldb.com
References
- https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/ssti.mdExploit, Third Party Advisory
- https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/ssti.md#pocExploit, Third Party Advisory
- https://vuldb.com/?ctiid.347336Exploit, Permissions Required
- https://vuldb.com/?id.347336Third Party Advisory
- https://vuldb.com/?submit.755357Exploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.