CVE-2026-35477

CVE-2026-35477 is a critical vulnerability in InvenTree versions 1.2.3 through 1.2.6 that involves incomplete patching of a previous code injection flaw. The issue stems from the PART_NAME_FORMAT validator being upgraded to use a sandboxed Jinja2 environment while the actual rendering engine in part/helpers.py continues to use the unsandboxed version, creating a validation bypass. Additionally, the validator uses a dummy Part instance that allows attackers to craft templates that behave differently during validation versus production execution. The vulnerability carries a CVSS score of 9.9 (Critical) with a network-based attack vector, low complexity, and low privileges required for exploitation. The impact is severe across all dimensions, with potential for complete compromise including confidentiality, integrity, and availability. However, exploitation requires staff-level permissions, limiting the threat actor pool to authenticated users with privileged access. While CVE-2026-35477 is not currently listed in CISA's Known Exploited Vulnerabilities catalog and does not appear on the hot vulnerability list, it is marked as actively being monitored and maintains a notable FAUCET Risk Score of 56.0 out of 100. Organizations running InvenTree 1.2.3 through 1.2.6 should prioritize upgrading to version 1.2.7 or 1.3.0 to remediate this vulnerability and ensure that staff access controls are properly enforced.