Key points
- The vulnerability is tracked as CVE-2026-115353 and rated Critical with a CVSS score of 9.2.
- Attackers can use relative or absolute paths to read sensitive system files without authentication.
- The flaw exists in the RST include directive processing within the Mistune library.
The open-source library Mistune, used for parsing Markdown, contains a critical security flaw in all versions before 3.3.0. The issue allows attackers to read arbitrary files on a server by manipulating how the library handles specific directives. This vulnerability is tracked as CVE-2026-115353 and carries a CVSS score of 9.2, indicating a severe risk to any system using affected versions of the software.
In plain English
The problem lies in how Mistune processes ReStructuredText (RST) include directives within Markdown documents. An attacker can craft a Markdown file that includes a directive pointing to a file outside the intended directory. By using sequences like "../" or providing absolute paths, the attacker can trick the system into reading sensitive files, such as credentials or environment configuration data, and embedding them into the rendered HTML output.
The background
This vulnerability is classified under CWE-22, which covers improper limitation of a pathname to a restricted directory. As Patch Herald reported on October 22, 2026, similar path traversal issues have been found in other systems like YouDataSum CPAS, highlighting the persistent risk of this flaw type. The Mistune issue specifically exploits the RST include directive, allowing an attacker to traverse the directory structure and access files they should not be able to see.
What changes now
Users of the Mistune library must upgrade to version 3.3.0 or later to resolve this issue. The vendor has released this update to patch the path traversal vulnerability. Systems running older versions remain exposed to the risk of unauthorized file access. Administrators should verify their current version and apply the update as soon as possible to prevent potential data exposure.
Who needs to act first
Teams should prioritize updating any public-facing applications that render user-submitted Markdown content. Check whether your web servers or content management systems rely on Mistune for processing text. If you cannot update immediately, consider disabling the RST include directive feature if your implementation allows it. Always test updates in a staging environment first to ensure compatibility. Back up your configuration files before making changes. Monitor logs for any unusual file access attempts during the transition period.
What to do and how to stay safe: Mistune
- Verify the version of Mistune installed on your systems and upgrade to 3.3.0 or newer.
- Review your applications to identify where user input is processed through the RST include directive.
- Monitor server logs for any attempts to access files using relative or absolute path sequences.
- Restrict file system permissions to limit the impact if an attacker successfully exploits the flaw.
Step-by-step guide: Out-of-Band Patches: Meaning, Risks, and Deployment Reality
General security guidance from the Patch Herald newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is the CVSS score for CVE-2026-115353?
The CVSS score is 9.2, which is rated as Critical.
Which versions of Mistune are affected?
All versions of Mistune before 3.3.0 are affected by this path traversal vulnerability.
How can attackers exploit this flaw?
Attackers can submit Markdown containing RST include directives with relative or absolute paths to read arbitrary files.
