Indico discloses local files resulting in Remote Code Execution through LaTeX injection
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-78.
Summary
Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.12, due to vulnerabilities in TeXLive and obscure LaTeX syntax that allowed circumventing Indico's LaTeX sanitizer, it is possible to use specially-crafted LaTeX snippets which can read local files or execute code with the privileges of the user running Indico on the server. Note that if server-side LaTeX rendering is not in use (ie `XELATEX_PATH` was not set in `indico.conf`), this vulnerability does not apply. It is recommended to update to Indico 3.3.12 as soon as possible. It is also strongly recommended to enable the containerized LaTeX renderer (using `podman`), which isolates it from the rest of the system. As a workaround, remove the `XELATEX_PATH` setting from `indico.conf` (or comment it out or set it to `None`) and restart the `indico-uwsgi` and `indico-celery` services to disable LaTeX functionality.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| indico | indico | before 3.3.12 | 3.3.12 | Patch available | CNA |
| — | indico (PyPI) | before 3.3.12 | 3.3.12 | Patch available | GHSA-rm2q-f7jv-3cfp |
- indico Vendorindico Affected before 3.3.12 Fixed in 3.3.12 Patch available CNA
- indico (PyPI) Vendor— Affected before 3.3.12 Fixed in 3.3.12 Patch available GHSA-rm2q-f7jv-3cfp
Remediation
- Fix · CNA indico (indico) Fixed in 3.3.12
- Fix · GHSA-rm2q-f7jv-3cfp indico (PyPI) Fixed in 3.3.12 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2026-33046
- 2026-10-03 Alias added: GHSA-rm2q-f7jv-3cfp
References
Patch 5
- https://github.com/indico/indico/security/advisories/GHSA-rm2q-f7jv-3cfp
- https://github.com/indico/indico/commit/0adb70f0ed66e129361d447868f5f3eb90dc5e96
- https://github.com/indico/indico/commit/1dbb12525b3de14229bf4d1ae192988068f975f6
- https://github.com/indico/indico/commit/5f24d23ce9c4b0e4b68b3d0b58987a948fc57c8a
- https://github.com/indico/indico/commit/fb169ced710c30cf792ce4b9f48688db0633cfd8
More Indico vulnerabilities
- TI-2024-34052 Authorization bypass in Indico CVSS 3.1HIGH 7.5
- TI-2026-20806 Indico has Server-Side Request Forgery (SSRF) in multiple places CVSS 4.0MEDIUM 6.9
- TI-2026-22632 Indico missing access check in event series management API CVSS 3.1MEDIUM 6.5
- TI-2021-10724 CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link. CVSS 3.1HIGH 7.5
- TI-2024-30448 Indico has a Cross-Site-Scripting during account creation CVSS 3.1MEDIUM 6.1
- TI-2025-33566 Indico vulnerable to user enumeration via API endpoint CVSS 4.0MEDIUM 5.3
Sources
- CVE-2026-33046 · CVE Program
- CVE-2026-33046 · NVD
- FIRST EPSS
- GHSA-rm2q-f7jv-3cfp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences