Path Traversal Vulnerability in Mistune Affects File Security

CVE-2026-115353

What is CVE-2026-115353?

Mistune versions prior to 3.3.0 are susceptible to a path traversal vulnerability in the RST include directive. This flaw enables attackers to exploit the software by providing relative or absolute paths within markdown files. By embedding include directives that reference parent directory sequences or direct paths, unauthorized individuals can access sensitive files, such as credentials or environment variables, potentially compromising the integrity and confidentiality of the system.

References