Nuclei
Monthly
Local attackers with write access to Nuclei's on-disk template storage can bypass template signature verification and cause arbitrary operating system commands to execute from a tampered template in ProjectDiscovery Nuclei versions before 3.11.1 (reported as 3.7.0 through 3.10.x). The root cause is CWE-347: cached signature-verification results were keyed only on a template file's modification time, so an attacker can swap a previously verified template for unsigned malicious content and restore the original mtime to have the stale 'verified' result reused under the default configuration where unsigned templates are disabled. The assessed attack path requires local low-privilege access (CVSS 4.0 PR:L) plus a victim operator actually running a scan against the tampered template (UI:P), so this is an access-gated supply-chain integrity flaw rather than a remotely exploitable or wormable one; no public exploit identified at time of analysis, and the vendor-released fix in 3.11.1 binds cache reuse to a content digest.
DSL expression injection in ProjectDiscovery Nuclei before 3.8.0 allows remote code execution when using the -env-vars flag with multi-step templates against untrusted targets. An attacker can inject malicious expressions into environment variables that are evaluated as Nuclei DSL code, achieving arbitrary code execution with the privileges of the Nuclei process. This vulnerability requires non-default configuration (explicit -env-vars usage) and high attack complexity, limiting real-world impact despite the RCE tag.
Sensitive environment-variable disclosure in ProjectDiscovery Nuclei (versions 3.0.0 through anything before 3.10.0) allows a malicious scan target to smuggle marker-shaped response content that is reinterpreted as template syntax in a later DAST/fuzz step and resolved against the scanner's own variable map, leaking host credentials, API keys, or tokens into scan output. The flaw is an unauthenticated, network-reachable issue (CVSS:3.1/AV:N/AC:H/PR:N/UI:R) but is tightly gated on the scanner host: the operator must run a multi-step DAST or fuzz template, that template must reuse response data through an internal:true extractor, and environment-variable expansion must be explicitly enabled with -env-vars; users who do not enable -env-vars are not affected by the disclosure. No public exploit identified at time of analysis, and this is an incomplete fix for CVE-2026-41645 remediated in Nuclei 3.10.0.
Arbitrary shell command execution is possible in ProjectDiscovery Nuclei versions 3.0.0 through 3.9.x when DAST mode (-dast) loads an attacker-supplied, unsigned multiprotocol template that combines an HTTP fuzzing: block with a code: block, allowing the embedded unsigned code request to bypass the code-template signature check and run shell commands on the scanning host. The flaw is a signature-verification bypass (CWE-78 command injection) and is constrained in practice: it requires the operator to enable DAST and to point the scanner at a malicious template, and it does not affect users who scan only with trusted, signed first-party templates or who do not use DAST. No public exploit code has been identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV); it is fixed in Nuclei 3.10.0. Note that the independent assessment rates the vector at CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H, treating confidentiality, integrity, and availability as fully impacted once the payload executes, which is a higher impact picture than the vendor-published 4.7 Medium score.
Local file disclosure in ProjectDiscovery Nuclei 3.0.0 through 3.9.x lets an untrusted, unsigned workflow template read arbitrary files from the scanner host even when the operator has not enabled file-protocol templates. The workflow loading path fails to enforce the -file capability gate for file: templates referenced by a workflow, so CLI users running workflows with -w and SDK integrations that accept end-user-supplied workflows while relying on the default file-access restriction are exposed; per the CVSS vector (AV:L, PR:N, UI:R, C:H/I:N/A:N, score 5.5) an unauthenticated attacker can trigger the read only if the operator loads and runs the malicious workflow, and impact is limited to confidentiality with no code execution or data modification. No public exploit code was identified at time of analysis and there is no confirmed active exploitation; vendor-released patch 3.10.0 closes the bypass (CWE-284 improper access control).
Local file disclosure in ProjectDiscovery Nuclei 3.0.0 through 3.9.x lets an attacker-controlled MySQL-compatible endpoint read arbitrary files off the host running the scanner, even when the local-file sandbox (-allow-local-file-access) is disabled. The nuclei/mysql JavaScript library honors an allowAllFiles MySQL DSN option supplied by an untrusted javascript: template, so the bundled Go MySQL driver accepts LOAD DATA LOCAL INFILE requests and returns file contents to the remote server; exploitation requires an operator to run the malicious template against the attacker's endpoint (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N, 5.3). No public exploit code was identified at time of analysis, and the vendor-released fix is version 3.10.0.
Nuclei is a vulnerability scanner powered by YAML based templates. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.
projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. Rated high severity (CVSS 7.4), this vulnerability is no authentication required. No vendor patch available.
Nuclei is a vulnerability scanner. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Local attackers with write access to Nuclei's on-disk template storage can bypass template signature verification and cause arbitrary operating system commands to execute from a tampered template in ProjectDiscovery Nuclei versions before 3.11.1 (reported as 3.7.0 through 3.10.x). The root cause is CWE-347: cached signature-verification results were keyed only on a template file's modification time, so an attacker can swap a previously verified template for unsigned malicious content and restore the original mtime to have the stale 'verified' result reused under the default configuration where unsigned templates are disabled. The assessed attack path requires local low-privilege access (CVSS 4.0 PR:L) plus a victim operator actually running a scan against the tampered template (UI:P), so this is an access-gated supply-chain integrity flaw rather than a remotely exploitable or wormable one; no public exploit identified at time of analysis, and the vendor-released fix in 3.11.1 binds cache reuse to a content digest.
DSL expression injection in ProjectDiscovery Nuclei before 3.8.0 allows remote code execution when using the -env-vars flag with multi-step templates against untrusted targets. An attacker can inject malicious expressions into environment variables that are evaluated as Nuclei DSL code, achieving arbitrary code execution with the privileges of the Nuclei process. This vulnerability requires non-default configuration (explicit -env-vars usage) and high attack complexity, limiting real-world impact despite the RCE tag.
Sensitive environment-variable disclosure in ProjectDiscovery Nuclei (versions 3.0.0 through anything before 3.10.0) allows a malicious scan target to smuggle marker-shaped response content that is reinterpreted as template syntax in a later DAST/fuzz step and resolved against the scanner's own variable map, leaking host credentials, API keys, or tokens into scan output. The flaw is an unauthenticated, network-reachable issue (CVSS:3.1/AV:N/AC:H/PR:N/UI:R) but is tightly gated on the scanner host: the operator must run a multi-step DAST or fuzz template, that template must reuse response data through an internal:true extractor, and environment-variable expansion must be explicitly enabled with -env-vars; users who do not enable -env-vars are not affected by the disclosure. No public exploit identified at time of analysis, and this is an incomplete fix for CVE-2026-41645 remediated in Nuclei 3.10.0.
Arbitrary shell command execution is possible in ProjectDiscovery Nuclei versions 3.0.0 through 3.9.x when DAST mode (-dast) loads an attacker-supplied, unsigned multiprotocol template that combines an HTTP fuzzing: block with a code: block, allowing the embedded unsigned code request to bypass the code-template signature check and run shell commands on the scanning host. The flaw is a signature-verification bypass (CWE-78 command injection) and is constrained in practice: it requires the operator to enable DAST and to point the scanner at a malicious template, and it does not affect users who scan only with trusted, signed first-party templates or who do not use DAST. No public exploit code has been identified at time of analysis and the issue is not listed as confirmed actively exploited (CISA KEV); it is fixed in Nuclei 3.10.0. Note that the independent assessment rates the vector at CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H, treating confidentiality, integrity, and availability as fully impacted once the payload executes, which is a higher impact picture than the vendor-published 4.7 Medium score.
Local file disclosure in ProjectDiscovery Nuclei 3.0.0 through 3.9.x lets an untrusted, unsigned workflow template read arbitrary files from the scanner host even when the operator has not enabled file-protocol templates. The workflow loading path fails to enforce the -file capability gate for file: templates referenced by a workflow, so CLI users running workflows with -w and SDK integrations that accept end-user-supplied workflows while relying on the default file-access restriction are exposed; per the CVSS vector (AV:L, PR:N, UI:R, C:H/I:N/A:N, score 5.5) an unauthenticated attacker can trigger the read only if the operator loads and runs the malicious workflow, and impact is limited to confidentiality with no code execution or data modification. No public exploit code was identified at time of analysis and there is no confirmed active exploitation; vendor-released patch 3.10.0 closes the bypass (CWE-284 improper access control).
Local file disclosure in ProjectDiscovery Nuclei 3.0.0 through 3.9.x lets an attacker-controlled MySQL-compatible endpoint read arbitrary files off the host running the scanner, even when the local-file sandbox (-allow-local-file-access) is disabled. The nuclei/mysql JavaScript library honors an allowAllFiles MySQL DSN option supplied by an untrusted javascript: template, so the bundled Go MySQL driver accepts LOAD DATA LOCAL INFILE requests and returns file contents to the remote server; exploitation requires an operator to run the malicious template against the attacker's endpoint (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N, 5.3). No public exploit code was identified at time of analysis, and the vendor-released fix is version 3.10.0.
Nuclei is a vulnerability scanner powered by YAML based templates. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This OS Command Injection vulnerability could allow attackers to execute arbitrary operating system commands on the host.
projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. Rated high severity (CVSS 7.4), this vulnerability is no authentication required. No vendor patch available.
Nuclei is a vulnerability scanner. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.