{"schema":"vulnpedia.research/1","cve":"CVE-2026-106505","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/backstage/backstage/security/advisories/GHSA-p75x-jh7p-ppcx","tags":["x_refsource_CONFIRM","Mitigation","Vendor Advisory","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T21:43:08.370Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T21:43:08.370Z","url":"https://github.com/backstage/backstage/security/advisories/GHSA-p75x-jh7p-ppcx"},{"source":"nvd","sourceId":"CVE-2026-106505","modified":"2026-10-09T17:58:21.970","url":"https://github.com/backstage/backstage/security/advisories/GHSA-p75x-jh7p-ppcx"},{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","url":"https://github.com/backstage/backstage/security/advisories/GHSA-p75x-jh7p-ppcx"},{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","modified":"2026-10-07T16:30:05.289295195Z","url":"https://github.com/backstage/backstage/security/advisories/GHSA-p75x-jh7p-ppcx"},{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://github.com/backstage/backstage/security/advisories/GHSA-p75x-jh7p-ppcx"}]},{"url":"https://github.com/backstage/backstage/commit/a7d995f11a5d27f0efbdbe8bb6c21b06988c79c9","tags":["x_refsource_MISC","Patch","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T21:43:08.370Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T21:43:08.370Z","url":"https://github.com/backstage/backstage/commit/a7d995f11a5d27f0efbdbe8bb6c21b06988c79c9"},{"source":"nvd","sourceId":"CVE-2026-106505","modified":"2026-10-09T17:58:21.970","url":"https://github.com/backstage/backstage/commit/a7d995f11a5d27f0efbdbe8bb6c21b06988c79c9"},{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","url":"https://github.com/backstage/backstage/commit/a7d995f11a5d27f0efbdbe8bb6c21b06988c79c9"},{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","modified":"2026-10-07T16:30:05.289295195Z","url":"https://github.com/backstage/backstage/commit/a7d995f11a5d27f0efbdbe8bb6c21b06988c79c9"},{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://github.com/backstage/backstage/commit/a7d995f11a5d27f0efbdbe8bb6c21b06988c79c9"}]},{"url":"https://github.com/backstage/backstage/commit/ef92d3d2b76046205c580e7152956514c15640db","tags":["x_refsource_MISC","Patch","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T21:43:08.370Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T21:43:08.370Z","url":"https://github.com/backstage/backstage/commit/ef92d3d2b76046205c580e7152956514c15640db"},{"source":"nvd","sourceId":"CVE-2026-106505","modified":"2026-10-09T17:58:21.970","url":"https://github.com/backstage/backstage/commit/ef92d3d2b76046205c580e7152956514c15640db"},{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","url":"https://github.com/backstage/backstage/commit/ef92d3d2b76046205c580e7152956514c15640db"},{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","modified":"2026-10-07T16:30:05.289295195Z","url":"https://github.com/backstage/backstage/commit/ef92d3d2b76046205c580e7152956514c15640db"},{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://github.com/backstage/backstage/commit/ef92d3d2b76046205c580e7152956514c15640db"}]},{"url":"https://github.com/backstage/backstage/releases/tag/v1.50.5","tags":["x_refsource_MISC","Patch","Release Notes","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T21:43:08.370Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T21:43:08.370Z","url":"https://github.com/backstage/backstage/releases/tag/v1.50.5"},{"source":"nvd","sourceId":"CVE-2026-106505","modified":"2026-10-09T17:58:21.970","url":"https://github.com/backstage/backstage/releases/tag/v1.50.5"},{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","url":"https://github.com/backstage/backstage/releases/tag/v1.50.5"},{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","modified":"2026-10-07T16:30:05.289295195Z","url":"https://github.com/backstage/backstage/releases/tag/v1.50.5"},{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://github.com/backstage/backstage/releases/tag/v1.50.5"}]},{"url":"https://github.com/backstage/backstage/releases/tag/v1.54.6","tags":["x_refsource_MISC","Patch","Release Notes","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T21:43:08.370Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-06T21:43:08.370Z","url":"https://github.com/backstage/backstage/releases/tag/v1.54.6"},{"source":"nvd","sourceId":"CVE-2026-106505","modified":"2026-10-09T17:58:21.970","url":"https://github.com/backstage/backstage/releases/tag/v1.54.6"},{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","url":"https://github.com/backstage/backstage/releases/tag/v1.54.6"},{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","modified":"2026-10-07T16:30:05.289295195Z","url":"https://github.com/backstage/backstage/releases/tag/v1.54.6"},{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://github.com/backstage/backstage/releases/tag/v1.54.6"}]},{"url":"https://osv.dev/vulnerability/GHSA-p75x-jh7p-ppcx","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","modified":"2026-10-07T16:30:05.289295195Z","origins":[{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","url":"https://osv.dev/vulnerability/GHSA-p75x-jh7p-ppcx"},{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","modified":"2026-10-07T16:30:05.289295195Z","url":"https://osv.dev/vulnerability/GHSA-p75x-jh7p-ppcx"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106505","tags":["ADVISORY","vendor-reference"],"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","modified":"2026-10-07T16:30:05.289295195Z","origins":[{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106505"},{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","modified":"2026-10-07T16:30:05.289295195Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106505"},{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106505"}]},{"url":"https://github.com/backstage/backstage","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","modified":"2026-10-07T16:30:05.289295195Z","origins":[{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","url":"https://github.com/backstage/backstage"},{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","modified":"2026-10-07T16:30:05.289295195Z","url":"https://github.com/backstage/backstage"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106505.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106505.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-106505","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-106505"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547230","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547230"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106505","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-106505"}]},{"source":"euvd","sourceId":"EUVD-2026-94070","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-94070","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-94070","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-94070"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","url":"https://osv.dev/vulnerability/GHSA-p75x-jh7p-ppcx","ecosystem":"npm","name":"@backstage/plugin-techdocs-node","purl":"pkg:npm/%40backstage/plugin-techdocs-node","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.15.4"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-p75x-jh7p-ppcx/GHSA-p75x-jh7p-ppcx.json"},"modified":"2026-10-07T16:30:05.289295195Z","origins":[{"source":"ghsa","sourceId":"GHSA-p75x-jh7p-ppcx","modified":"2026-10-07T16:30:05.289295195Z","url":"https://osv.dev/vulnerability/GHSA-p75x-jh7p-ppcx"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106505.json","productId":"red_hat_developer_hub:rhdh/rhdh-hub-rhel9","product":"rhdh/rhdh-hub-rhel9 as a component of Red Hat Developer Hub","status":"known_affected","remediations":[{"category":"workaround","details":"To reduce the risk of unauthorized code execution, implement the following operational and configuration controls:\n\n1. Restrict repository permissions: Limit write and commit access for repositories configured with TechDocs to trusted contributors only.\n2. Code review enforcement: Mandate pull request reviews for all modifications to MkDocs configuration files (such as mkdocs.yml or mkdocs.yaml) prior to merging.\n3. Container isolation: In the Backstage configuration (app-config.yaml), configure TechDocs to execute documentation generation inside an isolated container by setting `runIn: docker` instead of `runIn: local`, or offload documentation builds to an external CI/CD pipeline.\n\nCaveat: Container isolation reduces direct host system exposure but does not fully eliminate the vulnerability within the container environment. Modifying application configuration files requires restarting the service for changes to take effect."},{"category":"none_available","details":"Fix deferred"}],"purl":"pkg:oci/rhdh-hub-rhel9?repository_url=registry.redhat.io/rhdh/rhdh-hub-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106505.json"}]},{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106505.json","productId":"self-service_automation_portal_2:ansible-automation-platform/automation-portal","product":"ansible-automation-platform/automation-portal as a component of Self-service automation portal 2","status":"known_affected","remediations":[{"category":"workaround","details":"To reduce the risk of unauthorized code execution, implement the following operational and configuration controls:\n\n1. Restrict repository permissions: Limit write and commit access for repositories configured with TechDocs to trusted contributors only.\n2. Code review enforcement: Mandate pull request reviews for all modifications to MkDocs configuration files (such as mkdocs.yml or mkdocs.yaml) prior to merging.\n3. Container isolation: In the Backstage configuration (app-config.yaml), configure TechDocs to execute documentation generation inside an isolated container by setting `runIn: docker` instead of `runIn: local`, or offload documentation builds to an external CI/CD pipeline.\n\nCaveat: Container isolation reduces direct host system exposure but does not fully eliminate the vulnerability within the container environment. Modifying application configuration files requires restarting the service for changes to take effect."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/automation-portal?repository_url=registry.redhat.io/ansible-automation-platform/automation-portal","origins":[{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106505.json"}]},{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106505.json","productId":"self-service_automation_portal_2:ansible-automation-platform/bootc-automation-portal-rhel9","product":"ansible-automation-platform/bootc-automation-portal-rhel9 as a component of Self-service automation portal 2","status":"known_affected","remediations":[{"category":"workaround","details":"To reduce the risk of unauthorized code execution, implement the following operational and configuration controls:\n\n1. Restrict repository permissions: Limit write and commit access for repositories configured with TechDocs to trusted contributors only.\n2. Code review enforcement: Mandate pull request reviews for all modifications to MkDocs configuration files (such as mkdocs.yml or mkdocs.yaml) prior to merging.\n3. Container isolation: In the Backstage configuration (app-config.yaml), configure TechDocs to execute documentation generation inside an isolated container by setting `runIn: docker` instead of `runIn: local`, or offload documentation builds to an external CI/CD pipeline.\n\nCaveat: Container isolation reduces direct host system exposure but does not fully eliminate the vulnerability within the container environment. Modifying application configuration files requires restarting the service for changes to take effect."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-automation-portal-rhel9?repository_url=registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-106505","modified":"2026-10-20T19:55:39+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-106505.json"}]}],"vendorCoverage":{"total":3,"shown":3,"omitted":0,"source":"redhat"}}