PT-2025-26638 · Unknown+1 · Jinja2 Template Handler+2

Arashimuo · Published 2025-06-23 · Updated 2025-06-23 · CVE-2025-6518

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: PySpur-Dev pyspur versions up to 0.1.18

Description: A critical issue was found in the function SingleLLMCallNode of the file backend/pyspur/nodes/llm/single llm call.py of the component Jinja2 Template Handler. The manipulation of the argument user message leads to improper neutralization of special elements used in a template engine. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Recommendations: For PySpur-Dev pyspur versions up to 0.1.18, as a temporary workaround, consider disabling the SingleLLMCallNode function until a patch is available. Restrict access to the Jinja2 Template Handler to minimize the risk of exploitation. Avoid using the argument user message in the affected template engine until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1336

CWE-791

Related Identifiers

CVE-2025-6518

GHSA-8GFF-CF92-72PV

Affected Products

Jinja2 Template Handler

Pyspur-Dev

Pyspur

References · 10

• 🔥 https://github.com/PySpur-Dev/pyspur/issues/289 · Exploit
• https://osv.dev/vulnerability/GHSA-8gff-cf92-72pv · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-6518 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6518 · Security Note
• https://github.com/PySpur-Dev/pyspur · Note
• https://t.me/cvetracker/26865 · Telegram Post
• https://vuldb.com/?ctiid.313638 · Note
• https://vuldb.com/?id.313638 · Note
• https://twitter.com/CVEnew/status/1937228955008033015 · Twitter Post
• https://vuldb.com/?submit.593612 · Note