Vulnerability · Published May 28, 2026 · Assigned by GitHub_M
CVE-2026-45017Python Liquid: Absolute paths escape filesystem loader search path
High 8.2
In plain English
A high-severity path traversal in liquid from jg-rp. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Python Liquid is a Python engine for the Liquid template language. Prior to 2.2.0, the built-in FileSystemLoader and CachingFileSystemLoader do not guard against reading files outside their search paths when given an absolute path to resolve. This allows malicious template authors to load and render arbitrary files via the {% include %} and {% render %} tags. Targeted files would need to contain valid Liquid markup and be readable by the application process. This vulnerability is fixed in 2.2.0.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | python-liquid | 2.2.0 | GHSA-8p4x-wr7x-3788 |
| PyPI | python-liquid | 2.2.0 | PYSEC-2026-192 |
Affected products (as reported)
Weakness: CWE-22 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
References
- https://github.com/jg-rp/liquid/security/advisories/GHSA-8p4x-wr7x-3788 x_refsource_CONFIRM