Vibe Coding
CVE-2026-31020: DocsGPT renders user-supplied custom prompts through unsandboxed Jinja, giving unauthenticated RCE
NVD published CVE-2026-31020 on 2026-09-04: DocsGPT 0.15.0 and below renders its custom-prompt feature through Jinja templates with no input sanitization or sandboxing, so an unauthenticated attacker can inject template expressions for server-side template injection escalating to full remote code execution. Any "bring your own system prompt" feature that formats the prompt with a real template engine is an RCE surface, not a text field. Use string substitution or a sandboxed environment, and never render operator prompts with the same engine you render HTML with.
Source
↳ Follow the thread