Skip to content
Threat Feed
Subscribe

Tag

Latex

1 brief RSS
critical advisory

Indico LaTeX Injection Vulnerability (CVE-2026-33046)

A critical vulnerability in Indico versions prior to 3.3.12 allows specially-crafted LaTeX snippets to achieve local file read or arbitrary code execution due to insufficient sanitization of LaTeX input, impacting systems where server-side LaTeX rendering is enabled.

Indico CVE-2026-33046 latex code_execution file_read
2r 2t