CVE-2026-91925 | Polyaxon up to 2.16.4 Jinja2 queue/namespace/conditions/presets/dependencies code injection

September 15, 2026 Yanac

A vulnerability marked as critical has been reported in Polyaxon up to 2.16.4. This vulnerability affects unknown code of the component Jinja2. Performing a manipulation of the argument queue/namespace/conditions/presets/dependencies results in code injection.

This vulnerability is identified as CVE-2026-91925. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More