CyberRota Analysis
AI-GeneratedThe @backstage/plugin-techdocs-node package in Backstage versions prior to 1.14.6 and 1.15.4 is vulnerable to a bypass of the MkDocs configuration sanitizer, allowing users with commit access to execute arbitrary code on the TechDocs backend during documentation generation. This poses a significant risk to any organization using Backstage for developer portals, particularly those utilizing TechDocs for documentation management. Users should prioritize upgrading to the patched versions to mitigate this high-severity vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by bypass of mkdocs configuration sanitizer in techdocs backend. Users with the ability to commit changes to a repository that uses TechDocs can circumvent the MkDocs configuration file sanitizer introduced in response to CVE-2026-25153 and execute arbitrary code on the TechDocs backend host during documentation generation. This issue is fixed in versions 1.14.6 and 1.15.4.
Related CVEs
Other vulnerabilities affecting the same vendor(s)