CVE-2026-45553— NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()
Possible ATT&CK Techniques 1AI
T1083 · File and Directory DiscoveryGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-45553
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()
Source: NVD (National Vulnerability Database)
Vulnerability Description
NiceGUI is a Python-based UI framework. Prior to version 3.12.0, ui.restructured_text() renders reStructuredText server-side with Docutils without disabling file insertion directives. When a NiceGUI application passes attacker-controlled content to ui.restructured_text(), an attacker can use standard Docutils directives (include, csv-table with :file:, raw with :file:) to read local files readable by the NiceGUI server process. Applications that only pass trusted static strings to ui.restructured_text() are not affected. This issue has been patched in version 3.12.0.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
信息暴露
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| zauberzeug | nicegui | < 3.12.0 | - |
II. Public POCs for CVE-2026-45553
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-45553
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-45553 (1)
Vendor Pages for CVE-2026-45553 (1)
IV. Related Vulnerabilities
Same product: nicegui
- CVE-2026-45554
NiceGUI: Unauthenticated log-flood DoS via trailing slash on - CVE-2026-39844
NiceGUI has a Path Traversal in NiceGUI Upload Filename on W - CVE-2026-33332
NiceGUI's unvalidated chunk size parameter in media routes c - CVE-2026-27156
NiceGUI has XSS via Code Injection - CVE-2026-25516
NiceGUI's XSS vulnerability in ui.markdown() allows arbitrar
Same vendor: zauberzeug
- CVE-2026-45554
NiceGUI: Unauthenticated log-flood DoS via trailing slash on - CVE-2026-39844
NiceGUI has a Path Traversal in NiceGUI Upload Filename on W - CVE-2026-33332
NiceGUI's unvalidated chunk size parameter in media routes c - CVE-2026-27156
NiceGUI has XSS via Code Injection - CVE-2026-25516
NiceGUI's XSS vulnerability in ui.markdown() allows arbitrar
Same weakness: CWE-200
- CVE-2026-45080
Klaw: Improper Access Control Allows Disclosure of Password - CVE-2026-28511
elabftw has entry title leakage through autocompletion searc - CVE-2026-40965
Cloud Foundry UAA EC私钥暴露漏洞 - CVE-2026-45286
Nextcloud: Calendar app leaked user identifiers via attendee - CVE-2026-45277
Nextcloud: Information disclosure in Nextcloud Approval app
V. Comments for CVE-2026-45553
No comments yet