Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.9

Penpot lets attackers run commands via SVG export

CVE-2026-105691 · published 13 days ago
Summary

If a user can edit a design in Penpot, they can insert special text into a color setting that causes the system to run unintended commands when the file is exported as SVG. This can be triggered even through a shared public link, giving the attacker the same rights as the export service. Upgrade to Penpot version 2.18.0 or later to stop this behavior.

Original advisory text
Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command string and executes that string through child_process.exec. A user who can edit a file can store shell metacharacters in the fill color and trigger SVG export, causing commands to execute with the exporter service's privileges. The same export can be triggered through a valid public share link to a malicious file. This vulnerability is fixed in 2.18.0.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.9 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-78OS Command Injection
Timeline
Published5 Oct 2026
Updated15 Oct 2026
First seen5 Oct 2026
Sources
CVE-2026-105691 · NVD
CVE-2026-105691 · OSV
GHSA-4f36-m4hj-cv86 · GHSA
Track software like this
Free during beta