Is there a patch available for CVE-2026-41581?

Yes, a patch is available for CVE-2026-41581. Update the affected software to the latest version immediately.

Frappe Framework CVE-2026-41581

Q: What is the CVSS score of CVE-2026-41581?

CVE-2026-41581 has a CVSS 4.0 base score of 6.9 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-36453 MEDIUM

SQL Injection (CWE-89)

2026-06-12 GitHub_M

SQLi Frappe

6.9

CVSS 4.0 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.5 MEDIUM

Network-reachable unauthenticated endpoint (AV:N/PR:N); bounded SQL injection yields partial data read/write only, no scope change or availability impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jun 12, 2026 - 16:01 EUVD

Analysis Generated

Jun 12, 2026 - 14:56 vuln.today

DescriptionCVE.org

Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, there is a possible SQL Injection via get_blog_list. This issue has been patched in versions 15.106.0 and 16.16.0.

AnalysisAI

SQL Injection in the Frappe full-stack web framework's get_blog_list function allows unauthenticated remote attackers to manipulate database queries, leading to limited data read and write access. Frappe versions prior to 15.106.0 (v15 branch) and 16.16.0 (v16 branch) are affected across all deployments that expose the blog module. No public exploit code has been identified and exploitation probability is very low per EPSS (0.02%), though the network-accessible, unauthenticated attack surface warrants prompt patching for internet-facing instances.

Technical ContextAI

Frappe is a Python-based full-stack web application framework underpinning ERPNext and other business applications. The vulnerable function, get_blog_list, is a server-side data retrieval method that constructs SQL queries to fetch blog post listings. The root cause is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command), meaning attacker-controlled input is interpolated directly into SQL without adequate parameterization or escaping. The CPE cpe:2.3:a:frappe:frappe:*:*:*:*:*:*:*:* covers all versions of the Frappe package as distributed (e.g., via pip). The CVSS 4.0 vector AV:N/AC:L/AT:N/PR:N/UI:N confirms this endpoint is reachable over the network without authentication or special attack preconditions, consistent with a public-facing blog listing route.

RemediationAI

Upgrade Frappe to version 15.106.0 or later on the v15 branch, or to 16.16.0 or later on the v16 branch - these are the vendor-confirmed patched releases per the GitHub security advisory at https://github.com/frappe/frappe/security/advisories/GHSA-h9hf-57r4-cm65. For operators unable to patch immediately, a targeted workaround is to disable or restrict access to the blog listing endpoint (get_blog_list) via web server rules (e.g., nginx location block or WAF rule) - note that this will break blog listing functionality for end users. A web application firewall rule filtering SQL metacharacters on the affected route can reduce risk but should not be treated as a permanent substitute for patching, as WAF bypasses for SQLi are well-documented. No other compensating controls are specifically supported by the vendor advisory.