CVE-2026-105694: Penpot: Stored XSS via Unsanitised SVG Uploads
Penpot is an open-source design and prototyping platform. Prior to 2.18.0, authenticated users with file-edit permission can upload SVG media whose scripts, event-handler attributes, and foreignObject elements are stored without sanitization and served as image/svg+xml from the Penpot origin. A victim who navigates to the asset URL executes attacker-controlled JavaScript in that origin, allowing requests and data access with the victim's Penpot session authority. This issue is fixed in version 2.18.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Penpotto a version that resolves this vulnerability.Fixed in 2.18.0
Event History
Frequently Asked Questions
Who can exploit this issue and who is at risk?
An authenticated user with permission to edit a file can upload a malicious SVG. A victim is at risk when they navigate to that uploaded asset's URL while authenticated to the same Penpot instance.
What does successful exploitation allow?
The uploaded SVG can execute attacker-controlled JavaScript in the Penpot origin. This can make requests and access data using the victim's Penpot session authority.
Are standard SVG uploads affected?
Affected versions store SVG media without sanitizing scripts, event-handler attributes, or foreignObject elements, and serve them as image/svg+xml from the Penpot origin.
What version fixes the issue?
The issue is fixed in Penpot version 2.18.0. Versions prior to 2.18.0 are affected.