{"id":"CVE-2024-56326","aliases":["GHSA-q2x7-8rv6-6q7h","PYSEC-2026-1475"],"title":"Jinja has a sandbox breakout through indirect reference to format method","summary":"Jinja has a sandbox breakout through indirect reference to format method","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vendor":"jinja2","product":"jinja2","ecosystem":"pip","affected":["jinja2 < 3.1.5"],"patched":["jinja2 3.1.5"],"published":"2024-12-23","updated":"2026-09-10","sourceUpdated":"2026-09-10T03:50:21.662855250Z","source":"OSV","sourceUrl":"https://osv.dev/vulnerability/GHSA-q2x7-8rv6-6q7h","references":[{"url":"https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56326"},{"url":"https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4"},{"url":"https://github.com/pallets/jinja"},{"url":"https://github.com/pallets/jinja/releases/tag/3.1.5"},{"url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00022.html"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-56326.json"},{"url":"https://access.redhat.com/security/cve/CVE-2024-56326"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2333856"},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-56326"},{"url":"https://access.redhat.com/errata/RHSA-2025:1250"},{"url":"https://access.redhat.com/errata/RHSA-2025:0721"},{"url":"https://access.redhat.com/errata/RHSA-2025:0722"},{"url":"https://access.redhat.com/errata/RHSA-2025:0777"},{"url":"https://access.redhat.com/errata/RHSA-2025:0341"},{"url":"https://access.redhat.com/errata/RHBA-2025:1077"},{"url":"https://access.redhat.com/errata/RHBA-2025:0301"},{"url":"https://access.redhat.com/errata/RHBA-2025:1597"},{"url":"https://access.redhat.com/errata/RHSA-2025:1241"},{"url":"https://access.redhat.com/errata/RHSA-2025:2700"},{"url":"https://access.redhat.com/errata/RHSA-2025:1710"},{"url":"https://access.redhat.com/errata/RHSA-2025:1101"},{"url":"https://access.redhat.com/errata/RHSA-2025:0753"},{"url":"https://access.redhat.com/errata/RHSA-2025:2399"},{"url":"https://access.redhat.com/errata/RHSA-2025:1861"},{"url":"https://access.redhat.com/errata/RHSA-2025:1123"},{"url":"https://access.redhat.com/errata/RHSA-2025:0875"},{"url":"https://access.redhat.com/errata/RHSA-2024:6121"},{"url":"https://access.redhat.com/errata/RHSA-2025:0834"},{"url":"https://access.redhat.com/errata/RHSA-2025:1118"},{"url":"https://access.redhat.com/errata/RHSA-2025:0842"},{"url":"https://access.redhat.com/errata/RHSA-2025:1130"}],"tags":["osv","pip","csaf","vex","red-hat"],"epss":0.00521,"epssPercentile":0.41692,"cwe":["CWE-94"],"scores":{"osv":7.8,"vendor":6.3},"ingestedAt":"2026-07-08T18:25:52.069Z","slug":"CVE-2024-56326","body":"## Overview\n\nAn oversight in how the Jinja sandboxed environment detects calls to `str.format` allows an attacker that controls the content of a template to execute arbitrary Python code.\n\nTo exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates.\n\nJinja's sandbox does catch calls to `str.format` and ensures they don't escape the sandbox. However, it's possible to store a reference to a malicious string's `format` method, then pass that to a filter that calls it. No such filters are built-in to Jinja, but could be present through custom filters in an application. After the fix, such indirect calls are also handled by the sandbox.\n\n## Affected packages\n\n- `jinja2 < 3.1.5`\n\n## Remediation\n\nUpgrade to a patched release:\n\n- `jinja2 3.1.5`\n\n## Vendor advisories\n\n- **RHSA-2025:1250** · Red Hat · fixed in: Red Hat Enterprise Linux Server (v. 7 ELS) · released 2025-02-10 · [advisory](https://access.redhat.com/errata/RHSA-2025:1250)\n- **RHSA-2025:0721** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.4 for RHEL 8, Red Hat Ansible Automation Platform 2.4 for RHEL 9 · released 2025-01-27 · [advisory](https://access.redhat.com/errata/RHSA-2025:0721)\n- **RHSA-2025:0722** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.4 for RHEL 8 · released 2025-01-27 · [advisory](https://access.redhat.com/errata/RHSA-2025:0722)\n- **RHSA-2025:0777** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9 · released 2025-01-28 · [advisory](https://access.redhat.com/errata/RHSA-2025:0777)\n- **RHSA-2025:0341** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.5 for RHEL 8 · released 2025-01-15 · [advisory](https://access.redhat.com/errata/RHSA-2025:0341)\n- **RHBA-2025:1077** · Red Hat · fixed in: Quay v3 · released 2025-02-06 · [advisory](https://access.redhat.com/errata/RHBA-2025:1077)\n- **RHBA-2025:0301** · Red Hat · fixed in: Quay v3 · released 2025-01-20 · [advisory](https://access.redhat.com/errata/RHBA-2025:0301)\n- **RHBA-2025:1597** · Red Hat · fixed in: Quay v3 · released 2025-02-24 · [advisory](https://access.redhat.com/errata/RHBA-2025:1597)\n- **RHSA-2025:1241** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.12 · released 2025-02-13 · [advisory](https://access.redhat.com/errata/RHSA-2025:1241)\n- **RHSA-2025:2700** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.13 · released 2025-03-20 · [advisory](https://access.redhat.com/errata/RHSA-2025:2700)\n- **RHSA-2025:1710** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.15 · released 2025-02-27 · [advisory](https://access.redhat.com/errata/RHSA-2025:1710)\n- **Red Hat VEX** · Moderate · affected: OpenShift Lightspeed, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux AI (RHEL AI), Red Hat OpenShift AI (RHOAI), … · no fix planned: Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Container Platform 4, Red Hat Ansible Automation Platform 2, Red Hat Enterprise Linux 6, … · updated 2026-09-06 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-56326.json)","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":201400,"id":"CVE-2024-56326","ts":1789399397771,"field":"cvss","old":"6.3","new":"7.8"},{"seq":201399,"id":"CVE-2024-56326","ts":1789399397771,"field":"severity","old":"medium","new":"high"},{"seq":200135,"id":"CVE-2024-56326","ts":1789396745880,"field":"cvss","old":"7.8","new":"6.3"},{"seq":200134,"id":"CVE-2024-56326","ts":1789396745880,"field":"severity","old":"high","new":"medium"},{"seq":196931,"id":"CVE-2024-56326","ts":1789384237903,"field":"cvss","old":"6.3","new":"7.8"},{"seq":196930,"id":"CVE-2024-56326","ts":1789384237903,"field":"severity","old":"medium","new":"high"},{"seq":195858,"id":"CVE-2024-56326","ts":1789383180109,"field":"cvss","old":"7.8","new":"6.3"},{"seq":195857,"id":"CVE-2024-56326","ts":1789383180109,"field":"severity","old":"high","new":"medium"},{"seq":194786,"id":"CVE-2024-56326","ts":1789380216182,"field":"cvss","old":"6.3","new":"7.8"},{"seq":194785,"id":"CVE-2024-56326","ts":1789380216182,"field":"severity","old":"medium","new":"high"},{"seq":193574,"id":"CVE-2024-56326","ts":1789378046947,"field":"cvss","old":"7.8","new":"6.3"},{"seq":193573,"id":"CVE-2024-56326","ts":1789378046947,"field":"severity","old":"high","new":"medium"},{"seq":192360,"id":"CVE-2024-56326","ts":1789376135181,"field":"cvss","old":"6.3","new":"7.8"},{"seq":192359,"id":"CVE-2024-56326","ts":1789376135181,"field":"severity","old":"medium","new":"high"},{"seq":191148,"id":"CVE-2024-56326","ts":1789372902516,"field":"cvss","old":"7.8","new":"6.3"},{"seq":191147,"id":"CVE-2024-56326","ts":1789372902516,"field":"severity","old":"high","new":"medium"},{"seq":189932,"id":"CVE-2024-56326","ts":1789369055648,"field":"cvss","old":"6.3","new":"7.8"},{"seq":189931,"id":"CVE-2024-56326","ts":1789369055648,"field":"severity","old":"medium","new":"high"},{"seq":188720,"id":"CVE-2024-56326","ts":1789367884369,"field":"cvss","old":"7.8","new":"6.3"},{"seq":188719,"id":"CVE-2024-56326","ts":1789367884369,"field":"severity","old":"high","new":"medium"},{"seq":187502,"id":"CVE-2024-56326","ts":1789364900449,"field":"cvss","old":"6.3","new":"7.8"},{"seq":187501,"id":"CVE-2024-56326","ts":1789364900449,"field":"severity","old":"medium","new":"high"},{"seq":186290,"id":"CVE-2024-56326","ts":1789362821837,"field":"cvss","old":"7.8","new":"6.3"},{"seq":186289,"id":"CVE-2024-56326","ts":1789362821837,"field":"severity","old":"high","new":"medium"},{"seq":185075,"id":"CVE-2024-56326","ts":1789360887996,"field":"cvss","old":"6.3","new":"7.8"},{"seq":185074,"id":"CVE-2024-56326","ts":1789360887996,"field":"severity","old":"medium","new":"high"},{"seq":183863,"id":"CVE-2024-56326","ts":1789357728148,"field":"cvss","old":"7.8","new":"6.3"},{"seq":183862,"id":"CVE-2024-56326","ts":1789357728148,"field":"severity","old":"high","new":"medium"},{"seq":182115,"id":"CVE-2024-56326","ts":1789354022531,"field":"cvss","old":"6.3","new":"7.8"},{"seq":182114,"id":"CVE-2024-56326","ts":1789354022531,"field":"severity","old":"medium","new":"high"},{"seq":180908,"id":"CVE-2024-56326","ts":1789352766422,"field":"cvss","old":"7.8","new":"6.3"},{"seq":180907,"id":"CVE-2024-56326","ts":1789352766422,"field":"severity","old":"high","new":"medium"},{"seq":179701,"id":"CVE-2024-56326","ts":1789349895689,"field":"cvss","old":"6.3","new":"7.8"},{"seq":179700,"id":"CVE-2024-56326","ts":1789349895689,"field":"severity","old":"medium","new":"high"},{"seq":178494,"id":"CVE-2024-56326","ts":1789347582888,"field":"cvss","old":"7.8","new":"6.3"},{"seq":178493,"id":"CVE-2024-56326","ts":1789347582888,"field":"severity","old":"high","new":"medium"},{"seq":177287,"id":"CVE-2024-56326","ts":1789346086065,"field":"cvss","old":"6.3","new":"7.8"},{"seq":177286,"id":"CVE-2024-56326","ts":1789346086065,"field":"severity","old":"medium","new":"high"},{"seq":176080,"id":"CVE-2024-56326","ts":1789342564259,"field":"cvss","old":"7.8","new":"6.3"},{"seq":176079,"id":"CVE-2024-56326","ts":1789342564259,"field":"severity","old":"high","new":"medium"},{"seq":175866,"id":"CVE-2024-56326","ts":1789342170529,"field":"cvss","old":"6.3","new":"7.8"},{"seq":175865,"id":"CVE-2024-56326","ts":1789342170529,"field":"severity","old":"medium","new":"high"},{"seq":175404,"id":"CVE-2024-56326","ts":1789338180687,"field":"cvss","old":"7.8","new":"6.3"},{"seq":175403,"id":"CVE-2024-56326","ts":1789338180687,"field":"severity","old":"high","new":"medium"},{"seq":174199,"id":"CVE-2024-56326","ts":1789334523044,"field":"cvss","old":"6.3","new":"7.8"},{"seq":174198,"id":"CVE-2024-56326","ts":1789334523044,"field":"severity","old":"medium","new":"high"},{"seq":170622,"id":"CVE-2024-56326","ts":1789328173574,"field":"cvss","old":"7.8","new":"6.3"},{"seq":170621,"id":"CVE-2024-56326","ts":1789328173574,"field":"severity","old":"high","new":"medium"},{"seq":169417,"id":"CVE-2024-56326","ts":1789326785042,"field":"cvss","old":"6.3","new":"7.8"},{"seq":169416,"id":"CVE-2024-56326","ts":1789326785042,"field":"severity","old":"medium","new":"high"}]}