AIKIDO-2026-283491
nautobot is vulnerable to Code Injection
99
Critical Risk
This Affects:
nautobotTL;DR
Nautobot renders user-authored Jinja2 templates in a sandboxed environment for features such as computed fields, custom links, export templates, webhooks, job buttons, secrets, and data validation rules. The sandbox does not prevent a template from traversing the Django ORM from a model instance down to lower-level database interfaces, letting a template author reach the database cursor to execute arbitrary SQL and pivot to other models. When the database role is a PostgreSQL superuser, this reaches server-side command execution on the database host. The fix blocks access to Django ORM and database internals from templates and re-checks call safety.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you allow users to author Jinja2 templates that Nautobot renders with a database object in context, such as computed fields, custom links, export templates, webhooks, job buttons, secrets, or data validation rules.
Background info
nautobot is vulnerable to Code Injection in versions 0.0.1 - 2.4.37 and 3.0.0 - 3.1.8.
How to fix this
Upgrade the nautobot library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant