Input validation error in Jinja - CVE-2025-27516

Vulnerability identifier: #VU105387

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-27516

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to compromise the target system.

The vulnerability exists due to sandbox breakout through attr filter selecting format method. A local user can execute arbitrary code on the system.

Jinja
SUSE Linux Enterprise Server 15 SP5
Oracle Linux
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Ubuntu
Public Cloud Module
Basesystem Module
Python 3 Module
openSUSE Leap
openEuler
Fedora
Oracle Solaris
IBM Concert Software
Netcool Operations Insight
IBM Cloud Pak for Data System
IBM Fusion HCI
IBM Watson Knowledge Catalog in Cloud Pak for Data
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Spectrum Protect Plus
IBM Automation Decision Services
Oracle Communications Cloud Native Core Binding Support Function
Oracle Communications Cloud Native Core DBTier
Ansible Automation Platform
APEX Cloud Platform for Red Hat OpenShift
IBM Cloud Object Storage Systems
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Maximo Application Suite - Manage Component
Red Hat OpenStack
Outbound Email for SOAR App
Truststore Manager
Storage Defender - Resiliency Service
Guardium Data Security Center (GDSC)
Security QRadar EDR
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data
Knowledge Catalog Premium Cartridge
watsonx Code Assistant for Ansible
Maximo Application Suite - Predict Component
Maximo Application Suite Ai Service
Maximo Application Suite - Visual Inspection Component
Maximo Application Suite - Monitor Component
Maximo Application Suite - Edge Data Collector
APEX Cloud Platform for Microsoft Azure
SOAR QRadar Plugin App
Maximo Application Suite - IoT Component
watsonx.data
IBM Edge Application Manager
Migration Toolkit for Containers
IBM Cloud Pak for Multicloud Management
Red Hat OpenShift Container Platform
IBM Qradar SIEM
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python3-jinja2 (Ubuntu package)
python-jinja2 (Ubuntu package)
ansible-automation-platform-installer (Red Hat package)
automation-gateway (Red Hat package)
python3.11-django-ansible-base (Red Hat package)
python-jinja2 (Red Hat package)
python3-jinja2-doc
python3-jinja2
python3-Jinja2
openstack-ansible-core (Red Hat package)
python-jinja2-help
python-jinja2
python311-Jinja2
python3-jinja2+i18n
python3x-jinja2 (Red Hat package)
python3.11-jinja2 (Red Hat package)
python3x-pulpcore (Red Hat package)
python-pulpcore (Red Hat package)
python3.11-pulpcore (Red Hat package)
python3.11-django (Red Hat package)
automation-controller (Red Hat package)
python3x-galaxy-ng (Red Hat package)
automation-hub (Red Hat package)
python-galaxy-ng (Red Hat package)
fence-agents (Red Hat package)
fence-agents-heuristics-ping
fence-agents-azure-arm
fence-agents-aws
fence-agents-aliyun
fence-agents-redfish
fence-agents-ilo-ssh
fence-agents-kubevirt
fence-agents-kdump
fence-agents-ilo-mp
fence-agents-all
fence-agents-ilo-moonshot
fence-agents-ifmib
fence-agents-ibmblade
fence-agents-ibm-vpc
fence-agents-ibm-powervs
fence-agents-hpblade
fence-agents-intelmodular
fence-agents-eps
fence-agents-emerson
fence-agents-eaton-snmp
fence-agents-drac5
fence-agents-common
fence-agents-cisco-ucs
fence-agents-cisco-mds
fence-agents-brocade
fence-agents-bladecenter
fence-agents-apc-snmp
fence-agents-apc
fence-agents-amt-ws
ha-cloud-support
fence-virtd-tcp
fence-agents-vmware-soap
fence-virtd
fence-virtd-cpg
fence-virt
fence-agents-gce
fence-virtd-libvirt
fence-virtd-multicast
fence-virtd-serial
fence-agents-wti
fence-agents-vmware-rest
fence-agents-virsh
fence-agents-scsi
fence-agents-sbd
fence-agents-rsb
fence-agents-rsa
fence-agents-rhevm
fence-agents-mpath
fence-agents-lpar
fence-agents-ipmilan
fence-agents-ipdu
fence-agents-ilo2
python3.11-galaxy-ng (Red Hat package)
IBM API Connect
Oracle Communications Cloud Native Core Policy
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
OpenShift Data Foundation (formerly OpenShift Container Storage)
IBM Storage Scale System
Red Hat Ceph Storage

Install updates from vendor's website.

Jinja - update to 3.1.6
IBM Concert Software - update to 2.0.0
Netcool Operations Insight - update to 1.6.15
Truststore Manager - update to 1.7.0
Storage Defender - Resiliency Service - update to 2.0.13
IBM Cloud Pak for Data System - update to 8.10.25.06.SP4
IBM Fusion HCI - update to 2.10.0
watsonx.data - update to 2.3.1
Guardium Data Security Center (GDSC) - update to 3.8.5
Security QRadar EDR - update to 3.12.18
watsonx Orchestrate Cartridge for IBM Cloud Pak for Data - update to 5.2.1
IBM Watson Knowledge Catalog in Cloud Pak for Data - addressed in versions 4.8.9, 5.1.3
Knowledge Catalog Premium Cartridge - update to 5.2
IBM Watson Discovery for IBM Cloud Pak for Data - update to 5.2.0
watsonx Code Assistant for Ansible - update to 5.1.3
IBM Qradar SIEM - update to 7.5.0 Update Pack 11 IF04
Maximo Application Suite - Predict Component - update to 9.0.5
Maximo Application Suite Ai Service - update to 9.0.6
Maximo Application Suite - Visual Inspection Component - update to 9.0.7
Maximo Application Suite - Monitor Component - addressed in versions 9.0.10, 9.1.0
Maximo Application Suite - Edge Data Collector - addressed in versions 9.0.9, 9.1.0
IBM API Connect - update to 10.0.8.2 ifix2
IBM Spectrum Protect Plus - update to 10.1.17.1
IBM Automation Decision Services - update to 24.0.0.0.4
python3-jinja2 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.10.1-2ubuntu0.5, 2.10.1-2ubuntu0.6, 3.0.3-1ubuntu0.4, 3.1.2-1ubuntu1.3, 3.1.3-1ubuntu1.24.10.2
python-jinja2 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), python3-jinja2, 2.10.1-2ubuntu0.5, 2.10.1-2ubuntu0.6
APEX Cloud Platform for Microsoft Azure - update to 01.05.01.00
Migration Toolkit for Containers - update to 1.8.7
IBM Cloud Pak for Multicloud Management - update to 2.3 FP11
Ansible Automation Platform - addressed in versions 2.4, 2.5
ansible-automation-platform-installer (Red Hat package) - addressed in versions 2.5-10.el8ap, 2.5-10.el9ap
automation-gateway (Red Hat package) - addressed in versions 2.5.20250326-1.el8ap, 2.5.20250326-1.el9ap
python3.11-django-ansible-base (Red Hat package) - addressed in versions 2.5.20250326-1.el8ap, 2.5.20250326-1.el9ap
python-jinja2 (Red Hat package) - addressed in versions 2.10.1-2.el8_2.4, 2.10.1-2.el8_4.2, 2.10.1-4.el8_6.2, 2.10.1-5.el8_8, 2.11.3-5.el9_2, 2.11.3-7.el9_4, 2.11.3-8.el9_5, 3.1.6-1.el9ap
python3-jinja2-doc - addressed in versions 2.10.1-7.0.1, 3.1.3-4
python3-jinja2 - addressed in versions 2.10.1-7.0.1, 3.1.3-4
python3-Jinja2 - update to 2.10.1-150000.3.21.1
openstack-ansible-core (Red Hat package) - update to 2.14.2-4.7.el9ost
python-jinja2-help - addressed in versions 3.0.3-7, 3.1.3-5
python3-jinja2 - addressed in versions 3.0.3-7, 3.1.3-5
python-jinja2 - addressed in versions 3.0.3-7, 3.1.3-5
python311-Jinja2 - update to 3.1.2-150400.12.14.1
python3-jinja2+i18n - update to 3.1.3-4
python3x-jinja2 (Red Hat package) - update to 3.1.6-1.el8ap
python3.11-jinja2 (Red Hat package) - addressed in versions 3.1.6-1.el8ap, 3.1.6-1.el9ap
python-jinja2 - addressed in versions 3.1.6-1.fc40, 3.1.6-1.fc41, 3.1.6-1.fc42
APEX Cloud Platform for Red Hat OpenShift - update to 03.02.04.00
IBM Cloud Object Storage Systems - addressed in versions 3.19.0.54, 3.19.2.72
python3x-pulpcore (Red Hat package) - update to 3.28.37-1.el8ap
python-pulpcore (Red Hat package) - update to 3.28.37-1.el9ap
python3.11-pulpcore (Red Hat package) - addressed in versions 3.49.34-1.el8ap, 3.49.34-1.el9ap
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4, 4.14.18, 4.15.14, 4.17.7
python3.11-django (Red Hat package) - addressed in versions 4.2.20-1.el8ap, 4.2.20-1.el9ap
automation-controller (Red Hat package) - addressed in versions 4.5.20-1.el8ap, 4.5.20-1.el9ap, 4.6.10-1.el8ap, 4.6.10-1.el9ap
python3x-galaxy-ng (Red Hat package) - update to 4.9.3-1.el8ap
automation-hub (Red Hat package) - addressed in versions 4.9.3-1.el8ap, 4.9.3-1.el9ap, 4.10.3-1.el8ap, 4.10.3-1.el9ap
python-galaxy-ng (Red Hat package) - update to 4.9.3-1.el9ap
fence-agents (Red Hat package) - update to 4.10.0-62.el9_4.11
fence-agents-heuristics-ping - update to 4.10.0-76.0.1
fence-agents-azure-arm - update to 4.10.0-76.0.1
fence-agents-aws - update to 4.10.0-76.0.1
fence-agents-aliyun - update to 4.10.0-76.0.1
fence-agents-redfish - update to 4.10.0-76.0.1
fence-agents-ilo-ssh - update to 4.10.0-76.0.1
fence-agents-kubevirt - update to 4.10.0-76.0.1
fence-agents-kdump - update to 4.10.0-76.0.1
fence-agents-ilo-mp - update to 4.10.0-76.0.1
fence-agents-all - update to 4.10.0-76.0.1
fence-agents-ilo-moonshot - update to 4.10.0-76.0.1
fence-agents-ifmib - update to 4.10.0-76.0.1
fence-agents-ibmblade - update to 4.10.0-76.0.1
fence-agents-ibm-vpc - update to 4.10.0-76.0.1
fence-agents-ibm-powervs - update to 4.10.0-76.0.1
fence-agents-hpblade - update to 4.10.0-76.0.1
fence-agents-intelmodular - update to 4.10.0-76.0.1
fence-agents-eps - update to 4.10.0-76.0.1
fence-agents-emerson - update to 4.10.0-76.0.1
fence-agents-eaton-snmp - update to 4.10.0-76.0.1
fence-agents-drac5 - update to 4.10.0-76.0.1
fence-agents-common - update to 4.10.0-76.0.1
fence-agents-cisco-ucs - update to 4.10.0-76.0.1
fence-agents-cisco-mds - update to 4.10.0-76.0.1
fence-agents-brocade - update to 4.10.0-76.0.1
fence-agents-bladecenter - update to 4.10.0-76.0.1
fence-agents-apc-snmp - update to 4.10.0-76.0.1
fence-agents-apc - update to 4.10.0-76.0.1
fence-agents-amt-ws - update to 4.10.0-76.0.1
ha-cloud-support - update to 4.10.0-76.0.1
fence-virtd-tcp - update to 4.10.0-76.0.1
fence-agents-vmware-soap - update to 4.10.0-76.0.1
fence-virtd - update to 4.10.0-76.0.1
fence-virtd-cpg - update to 4.10.0-76.0.1
fence-virt - update to 4.10.0-76.0.1
fence-agents-gce - update to 4.10.0-76.0.1
fence-virtd-libvirt - update to 4.10.0-76.0.1
fence-virtd-multicast - update to 4.10.0-76.0.1
fence-virtd-serial - update to 4.10.0-76.0.1
fence-agents-wti - update to 4.10.0-76.0.1
fence-agents-vmware-rest - update to 4.10.0-76.0.1
fence-agents-virsh - update to 4.10.0-76.0.1
fence-agents-scsi - update to 4.10.0-76.0.1
fence-agents-sbd - update to 4.10.0-76.0.1
fence-agents-rsb - update to 4.10.0-76.0.1
fence-agents-rsa - update to 4.10.0-76.0.1
fence-agents-rhevm - update to 4.10.0-76.0.1
fence-agents-mpath - update to 4.10.0-76.0.1
fence-agents-lpar - update to 4.10.0-76.0.1
fence-agents-ipmilan - update to 4.10.0-76.0.1
fence-agents-ipdu - update to 4.10.0-76.0.1
fence-agents-ilo2 - update to 4.10.0-76.0.1
python3.11-galaxy-ng (Red Hat package) - addressed in versions 4.10.3-1.el8ap, 4.10.3-1.el9ap
Red Hat OpenShift Container Platform - addressed in versions 4.12.76, 4.13.57, 4.14.50, 4.15.49, 4.16.40, 4.17.27, 4.17.28, 4.18.9, 4.18.10
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.1.3
SOAR QRadar Plugin App - update to 5.6.2
IBM Storage Scale System - addressed in versions 6.1.9.7, 6.2.3.0
Red Hat Ceph Storage - update to 8.1
IBM Maximo Application Suite - Manage Component - addressed in versions 8.6.24, 8.7.18, 9.0.11
Maximo Application Suite - IoT Component - addressed in versions 8.10.23, 8.11.19, 9.0.9
Oracle Solaris - addressed in versions 11.3 ESU 36.34, 11.4 SRU 80
Red Hat OpenStack - update to 17.1

• https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403
• https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7

• Code execution in Jinja
• Fedora 41 update for python-jinja2
• Fedora 42 update for python-jinja2
• Fedora 40 update for python-jinja2
• Ubuntu update for jinja2
• Ubuntu update for jinja2
• Red Hat Enterprise Linux 9 update for fence-agents
• SUSE update for python-Jinja2
• Input validation error in Ansible Automation Platform 2.4 packages
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• Multiple vulnerabilities in Ansible Automation Platform 2.5 packages
• Multiple vulnerabilities in Ansible Automation Platform 2.5 packages
• SUSE update for python-Jinja2
• Input validation error in Red Hat OpenStack 17.1 packages
• Anolis OS update for fence-agents
• Red Hat Enterprise Linux 9 update for python-jinja2
• Red Hat Enterprise Linux 8 update for python-jinja2
• Red Hat Enterprise Linux 8 update for python-jinja2
• Red Hat Enterprise Linux 9 update for python-jinja2
• Red Hat Enterprise Linux 9 update for python-jinja2
• IBM Maximo Application Suite - Predict Component update for Jinja
• Red Hat Enterprise Linux 8 update for python-jinja2
• Red Hat Enterprise Linux 8 update for python-jinja2
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14
• IBM Maximo Application Suite - Manage Component update for Jinja
• Oracle Solaris update for third-party components
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Policy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Binding Support Function
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Function Cloud Native Environment
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in IBM Storage Defender - Resiliency Service
• Anolis OS update for python-jinja2
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.18
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• Multiple vulnerabilities in IBM QRadar SIEM
• Anolis OS update for python-jinja2
• IBM Maximo Application Suite Ai-Service Component update for Jinja
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage)
• Input validation error in Red Hat OpenShift Container Platform 4.12
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• IBM Maximo Application Suite - Monitor Component update for Jinja
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
• openEuler 24.03 LTS SP1 update for python-jinja2
• openEuler 24.03 LTS update for python-jinja2
• openEuler 22.03 LTS SP4 update for python-jinja2
• openEuler 22.03 LTS SP3 update for python-jinja2
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.17
• IBM Maximo Application Suite - Monitor Component update for Jinja
• Multiple vulnerabilities in IBM Fusion
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage)
• Multiple vulnerabilities in Migration Toolkit for Containers 1.8
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.15
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.14
• IBM watsonx Code Assistant On Prem update for Jinja
• Multiple vulnerabilities in IBM API Connect
• Multiple vulnerabilities in IBM Security QRadar EDR
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• IBM Truststore Manager update for Jinja
• IBM Maximo Application Suite - IoT Component update for Jinja
• Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management
• Multiple vulnerabilities in Red Hat Ceph Storage 8
• Multiple vulnerabilities in IBM Storage Scale System
• IBM Cloud Pak for Data System 2.0 update for Jinja
• Multiple vulnerabilities in IBM Watson Knowledge Catalog
• Multiple vulnerabilities in Oracle Communications Cloud Native Core DBTier
• IBM Outbound Email for SOAR App on App update for Jinja
• Multiple vulnerabilities in IBM Automation Decision Services
• Multiple vulnerabilities in IBM Cloud Object System
• IBM Maximo Application Suite - Visual Inspection Component update for Jinja
• IBM SOAR QRadar Plugin App update for Jinja
• Multiple vulnerabilities in IBM Concert Software
• IBM Watson Discovery update for Jinja
• IBM watsonx Orchestrate Cartridge for IBM Cloud Pak for Data update for Jinja
• Multiple vulnerabilities in IBM Edge Application Manager
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in IBM Guardium Data Security Center
• SUSE update for python-Jinja2
• Multiple vulnerabilities in IBM Knowledge Catalog Premium Cartridge
• Multiple vulnerabilities in IBM watsonx.data