Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs theme configuration in techdocs. When TechDocs is configured to build documentation locally or in a container, a user with write access to a registered repository can include configuration values in mkdocs.yml that cause arbitrary code execution during the documentation build process. This issue is fixed in versions 1.14.6 and 1.15.4.
Fix
Patch, vendor advisory and mitigation references on NVD 3
- https://github.com/backstage/backstage/commit/02cd7cdbb18b687446277b5602adaee7f1d53cbb Exploit, Patch
- https://github.com/backstage/backstage/commit/a900a9953c8f7ad3ba1906d1d257725a9996cc9d Exploit, Patch
- https://github.com/backstage/backstage/security/advisories/GHSA-8w7q-29mw-gf5c Vendor Advisory, Mitigation
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.8 · linuxfoundationNVD modified 2026-10-09 17:34
Affected (CPE criteria) 7
cpe:2.3:a:linuxfoundation:backstage_plugin-techdocs-node:*:*:*:*:*:*:*:*cpe:2.3:a:linuxfoundation:backstage:*:*:*:*:*:*:*:*cpe:2.3:a:linuxfoundation:backstage:1.51.0:-:*:*:*:*:*:*cpe:2.3:a:linuxfoundation:backstage:1.51.0:next0:*:*:*:*:*:*cpe:2.3:a:linuxfoundation:backstage:1.51.0:next1:*:*:*:*:*:*cpe:2.3:a:linuxfoundation:backstage:1.51.0:next2:*:*:*:*:*:*cpe:2.3:a:linuxfoundation:backstage:1.51.0:next3:*:*:*:*:*:*
References 5
- https://github.com/backstage/backstage/commit/02cd7cdbb18b687446277b5602adaee7f1d53cbb Exploit, Patch
- https://github.com/backstage/backstage/commit/a900a9953c8f7ad3ba1906d1d257725a9996cc9d Exploit, Patch
- https://github.com/backstage/backstage/releases/tag/v1.50.5 Release Notes
- https://github.com/backstage/backstage/releases/tag/v1.54.6 Release Notes
- https://github.com/backstage/backstage/security/advisories/GHSA-8w7q-29mw-gf5c Vendor Advisory, Mitigation