Skip to content
Threat Feed
Subscribe

Product

Plugin-Techdocs-Node (< 1.15.4)

1 brief RSS
high advisory

Remote Code Execution in Backstage TechDocs via Malicious MkDocs Configuration

An improper input validation vulnerability (CVE-2026-106509) in Backstage plugin-techdocs-node allows authenticated users to achieve arbitrary code execution via crafted mkdocs.yml files.

plugin-techdocs-node vulnerability rce supply-chain
3t 1c