TI-2026-33302 Aliases CVE-2026-45553 GHSA-jfrm-rx66-g536

NiceGUI: Local file disclosure via Docutils file insertion in ui.restructured_text()

LOW 38CWE-200Published 2026-06-02 · Updated 2026-06-03

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-200.

Summary

NiceGUI is a Python-based UI framework. Prior to version 3.12.0, ui.restructured_text() renders reStructuredText server-side with Docutils without disabling file insertion directives. When a NiceGUI application passes attacker-controlled content to ui.restructured_text(), an attacker can use standard Docutils directives (include, csv-table with :file:, raw with :file:) to read local files readable by the NiceGUI server process. Applications that only pass trusted static strings to ui.restructured_text() are not affected. This issue has been patched in version 3.12.0.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00255 17th percentileScored 2026-11-07

Fix Fixed nicegui (zauberzeug): 3.12.0nicegui (PyPI): 3.12.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
zauberzeug	nicegui	before 3.12.0	3.12.0	Patch available	CNA
—	nicegui (PyPI)	before 3.12.0	3.12.0	Patch available	GHSA-jfrm-rx66-g536

nicegui Vendorzauberzeug Affected before 3.12.0 Fixed in 3.12.0 Patch available CNA
nicegui (PyPI) Vendor— Affected before 3.12.0 Fixed in 3.12.0 Patch available GHSA-jfrm-rx66-g536

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPE	Versions	Role	Vendor
cpe:2.3:a:zauberzeug:nicegui::::::::	—	—	zauberzeug

cpe:2.3:a:zauberzeug:nicegui:*:*:*:*:*:*:*:* Versions — — ·zauberzeug

Remediation

Fix · CNA nicegui (zauberzeug) Fixed in 3.12.0
Fix · GHSA-jfrm-rx66-g536 nicegui (PyPI) Fixed in 3.12.0 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-45553
2026-10-03 Alias added: GHSA-jfrm-rx66-g536

References

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-45553

Other 3

TI-2024-21104 Local File Inclusion in NiceGUI leaflet component CVSS 3.1HIGH 8.2
TI-2025-41029 NiceGUI Path Traversal Vulnerability in app.add_media_files() Allows Arbitrary File Reading CVSS 3.1HIGH 7.5
TI-2025-15578 NiceGUI On Air authentication issue CVSS 3.1HIGH 7.5
TI-2026-17574 Zero-click XSS in all NiceGUI apps which uses `ui.sub_pages` CVSS 3.1HIGH 7.2
TI-2026-17575 NiceGUI has Redis connection leak via tab storage causes service degradation CVSS 3.1MEDIUM 5.3
TI-2026-17573 NiceGUI apps are vulnerable to XSS which uses `ui.sub_pages` and render arbitrary user-provided links CVSS 3.1MEDIUM 6.1

See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences