Frappe Framework: Server-side template injection via message fields
Summary
Frappe Framework versions before 15.111.0 and 16.x before 16.21.0 render user-controlled message fields as templates without neutralization. An authenticated user with a common operational role can inject template expressions that the server evaluates in an unrestricted context. Successful exploitation can lead to code execution on the server, with high impact on confidentiality, integrity and availability, though the exact impact is not confirmed by the vendor.
Affected
- Frappe Framework 16.0.0 to before 16.21.0
- Frappe Framework before 15.111.0
- ERPNext is a separate package and is not covered by this entry
Fixed in
- Frappe Framework 15.111.0 (15.x)
- Frappe Framework 16.21.0 (16.x)
- Note: a related CVE-2026-65974 lists 16.22.0 as the fixed version for 16.x; verify with Frappe before choosing the target version
Workaround
- No vendor workaround is available. Upgrading is the documented remedy.
- Interim measure (not vendor-sourced): review which users hold operational roles that can submit messages and remove unneeded roles.
Exploitation
- No known exploitation according to one third-party tracker.
- Not listed in CISA KEV according to a third-party tracker; the CISA catalogue was not checked directly.
- EPSS: 0.31 % (percentile 23).
- No public proof of concept found for this CVE.
Our recommendation
- Identify all Frappe Framework installations and their versions.
- Upgrade to 15.111.0 or later in the 15.x line, and to 16.21.0 or later (preferably 16.22.0 or later, pending verification with Frappe) in the 16.x line.
- Review users with operational roles that can submit messages and remove unneeded roles until the update is applied.
- Review application and reverse-proxy logs for unusual template syntax in message submissions.
- If ERPNext is used, check it separately: fixed versions are 15.119.1 and 16.32.0 (CVE-2026-109652).
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- GitHub Security Advisory GHSA-6pmg-vc6m-6wrr github.com
- VulnCheck Advisory CVE-2026-119144 www.vulncheck.com
- VulDB 428626 vuldb.com
- Frappe Security Page github.com
- Red Packet Security CVE Alert www.redpacketsecurity.com
- Strix CVE-2026-119144 www.strix.ai
- VulnCheck Advisory ERPNext CVE-2026-109652 www.vulncheck.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 23:35.
Original description (NVD)
Frappe Framework before 15.111.0 and 16.x before 16.21.0 contains a server-side template injection vulnerability because user-controlled message fields are rendered as templates without neutralization. An authenticated attacker holding a common operational role can inject template expressions that the server evaluates in an unrestricted context.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.