Skip to main content

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2026-45553

Low
0/10

Summary

A vulnerability has been found in nicegui versions through 3.11.1. The 'ui.restructured_text()' renders reStructuredText server-side with Docutils without disabling file insertion directives. When a NiceGUI application passes attacker-controlled content to 'ui.restructured_text()', an attacker can use standard Docutils directives ('include', 'csv-table' with ':file:', 'raw' with ':file:') to read local files readable by the NiceGUI server process. Applications that only pass trusted static strings to 'ui.restructured_text()' are not affected.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • HIGH
  • NONE

CWE-200 - Information Exposure

An information exposure vulnerability is categorized as an information flow (IF) weakness, which can potentially allow unauthorized access to otherwise classified information in the application, such as confidential personal information (demographics, financials, health records, etc.), business secrets, and the application's internal environment.

References

Advisory Timeline

  • Published