CVE-2024-56326

CVE-2024-56326 is a high-severity vulnerability affecting the Jinja templating engine prior to version 3.1.5. It allows an attacker to execute arbitrary Python code by manipulating template content, specifically through an oversight in how Jinja's sandboxed environment handles indirect calls to str.format. The vulnerability has a CVSS score of 7.8 (High) and could lead to full compromise of confidentiality, integrity, and availability if an attacker can control untrusted templates. While there are no known public exploits or active exploitation, the vulnerability has garnered some community discussion.