Skip to content
Threat Feed

Product

Nicegui (<= 3.11.1)

1 brief RSS
high advisory

NiceGUI Local File Disclosure via Docutils File Insertion (CVE-2026-45553)

CVE-2026-45553 allows a remote attacker to read arbitrary local files by injecting reStructuredText directives into the `ui.restructured_text()` function of a NiceGUI application, if the application passes user-controlled content to that function.

nicegui local-file-disclosure docutils CVE-2026-45553
2r 1t