Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.0
Datapizza-ai Server-Side Template Injection via ChatPromptTemplate
CVE-2026-2969
GHSA-q5xx-fxv3-xxqf
Summary
The Datapizza-ai software has a security flaw that could allow hackers to inject malicious code into the system. This could happen if a hacker sends a specially crafted message to the system, potentially allowing them to access sensitive information or take control of the system. If you use Datapizza-ai, update to the latest version to fix the issue.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| – | datapizza-ai-core | <= 0.0.2 | – |
| datapizza | datapizza_ai | 0.0.2 | – |
Original title
datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler
Original description
A flaw has been found in datapizza-labs datapizza-ai 0.0.2. Affected is the function ChatPromptTemplate of the file datapizza-ai-core/datapizza/modules/prompt/prompt.py of the component Jinja2 Template Handler. This manipulation of the argument Prompt causes improper neutralization of special elements used in a template engine. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
nvd CVSS2.0
5.8
nvd CVSS3.1
7.2
nvd CVSS4.0
5.1
Vulnerability type
CWE-791
CWE-1336
- https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/ssti.md Exploit Third Party Advisory
- https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/ssti.md#poc Exploit Third Party Advisory
- https://vuldb.com/?ctiid.347336 Exploit Permissions Required
- https://vuldb.com/?id.347336 Third Party Advisory
- https://vuldb.com/?submit.755357 Exploit
- https://nvd.nist.gov/vuln/detail/CVE-2026-2969
- https://github.com/advisories/GHSA-q5xx-fxv3-xxqf
Published: 23 Feb 2026 · Updated: 12 Mar 2026 · First seen: 6 Mar 2026