CVE-2026-115353: Mistune before 3.3.0 Path Traversal via include Directive

Q: Which Mistune versions are affected?

Mistune versions before 3.3.0 are affected.

Q: What attacker capability is needed to exploit this issue?

An attacker needs to be able to submit Markdown that is rendered with support for the RST include directive. They can reference files using relative traversal sequences such as ../ or absolute paths.

Q: Which deployments are realistically exposed?

Deployments that render attacker-controlled Markdown and process include directives are exposed to arbitrary local file disclosure. The disclosed content may include credentials or environment data embedded in the rendered HTML.

Published Oct 22, 2026

Updated

Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attackers to read arbitrary files by supplying relative or absolute paths. Attackers can submit markdown containing include directives referencing ../ sequences or absolute paths to embed sensitive files like credentials or environment data in rendered HTML.

Affected Software

1 affected component

pypi/mistune<3.3.0

Event History

Oct 22, 2026

CVE Published

via MITRE·07:13 PM

Data Sourced

via MITRE·07:13 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which Mistune versions are affected?

Mistune versions before 3.3.0 are affected.

What attacker capability is needed to exploit this issue?

An attacker needs to be able to submit Markdown that is rendered with support for the RST include directive. They can reference files using relative traversal sequences such as ../ or absolute paths.

Which deployments are realistically exposed?

Deployments that render attacker-controlled Markdown and process include directives are exposed to arbitrary local file disclosure. The disclosed content may include credentials or environment data embedded in the rendered HTML.

CVE-2026-115353: Mistune before 3.3.0 Path Traversal via include Directive

Affected Software

Event History

Frequently Asked Questions

Which Mistune versions are affected?

What attacker capability is needed to exploit this issue?

Which deployments are realistically exposed?

Company

Resources

Contact

Frequently Asked Questions

Which Mistune versions are affected?

What attacker capability is needed to exploit this issue?

Which deployments are realistically exposed?