PT-2026-21491 · Datapizza · Datapizza-Ai

Edoardottt · Published 2026-02-22 · Updated 2026-02-23 · CVE-2026-2969

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions datapizza-labs datapizza-ai version 0.0.2

Description A flaw exists in the Jinja2 Template Handler component of datapizza-ai. Specifically, the ChatPromptTemplate function within the datapizza-ai-core/datapizza/modules/prompt/prompt.py file is susceptible to improper neutralization of special elements used in a template engine due to manipulation of the Prompt argument. This allows for remote exploitation. The exploit has been published. The vendor was contacted but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-791

CWE-1336

Related Identifiers

CVE-2026-2969

GHSA-Q5XX-FXV3-XXQF

Affected Products

Datapizza-Ai

References · 14

• 🔥 https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/ssti.md · Exploit
• 🔥 https://vuldb.com/?ctiid.347336 · Exploit
• 🔥 https://vuldb.com/?submit.755357 · Exploit
• 🔥 https://github.com/hacktivesec/datapizza-ai-disclosure/blob/main/ssti.md#poc · Exploit
• https://osv.dev/vulnerability/CVE-2026-2969 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2969 · Security Note
• https://osv.dev/vulnerability/GHSA-q5xx-fxv3-xxqf · Vendor Advisory
• https://github.com/datapizza-labs/datapizza-ai · Note
• https://t.me/CVEtracker/45470 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2025644218610303000 · Twitter Post
• https://vuldb.com/?id.347336 · Note
• https://twitter.com/VulmonFeeds/status/2025646778658213986 · Twitter Post
• https://t.me/cveNotify/152810 · Telegram Post
• https://twitter.com/CVEnew/status/2025809024567108052 · Twitter Post