Vulnerability · Published Jul 31, 2024 · Assigned by GitHub_M

CVE-2024-41950Insecure Jinja2 templates rendered in Haystack Components can lead to RCE

High 7.5

In plain English

A high-severity security flaw in haystack from deepset-ai. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)1.2%top 32.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Haystack is an end-to-end LLM framework that allows you to build applications powered by LLMs, Transformer models, vector search and more. Haystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions. Certain Components in Haystack use Jinja2 templates, if anyone can create and render that template on the client machine they run any code. The vulnerability has been fixed with Haystack `2.3.1`.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	haystack-ai	2.3.1	GHSA-hx9v-6r9f-w677
PyPI	haystack-ai	2.3.1	PYSEC-2026-1447

Affected products (as reported)

Vendor	Product	Versions
deepset-ai	haystack	< 2.3.1

Weakness: CWE-1336 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://github.com/deepset-ai/haystack/security/advisories/GHSA-hx9v-6r9f-w677 x_refsource_CONFIRM
https://github.com/deepset-ai/haystack/pull/8095 x_refsource_MISC
https://github.com/deepset-ai/haystack/pull/8096 x_refsource_MISC
https://github.com/deepset-ai/haystack/commit/3fed1366c448b02189851bf08166c1f6477a02b0 x_refsource_MISC
https://github.com/deepset-ai/haystack/commit/6c25a5c73e83aa32c3241ba84a5cbb3ac0e8a89e x_refsource_MISC
https://github.com/deepset-ai/haystack/releases/tag/v2.3.1 x_refsource_MISC