Directory Traversal Vulnerability in PyMdown Extensions by Facelessuser
CVE-2026-46338

4.3MEDIUM

Key Information:

Vendor

Facelessuser

Status
Pymdown-extensions
Vendor
CVE Published:
16 July 2026

What is CVE-2026-46338?

A directory traversal vulnerability exists in the PyMdown Extensions, specifically in the snippet handling component. When 'restrict_base_path' is set to True, the SnippetPreprocessor's get_snippet_path() method improperly allows access to sibling directory files, enabling potential unauthorized file reads. This issue surfaced as a regression of a previous vulnerability and affects various versions between 10.0.1 and 10.21.2. Users are advised to upgrade to version 10.21.3 or later to mitigate this risk.

Affected Version(s)

pymdown-extensions >= 10.0.1, < 10.21.3

References

https://github.com/facelessuser/pymdown-extensions/securi...
x_refsource_CONFIRM
https://github.com/facelessuser/pymdown-extensions/commit...
x_refsource_MISC
https://github.com/facelessuser/pymdown-extensions/releas...
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.