Skip to content
OpenAdvisories

Vendor

penpot

20 known vulnerabilities.

Products

penpot 20 @penpot/mcp 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.7
    CVE-2026-47665

    Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML

    Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without …

    penpot penpot
  • High 7.6
    CVE-2026-47666

    Penpot: Stored XSS via custom font family name injected into a @font-face style rule

    Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through custom font family names, which are interpolated into a @font-face CSS rule and injected into the pag…

    penpot penpot
  • High 7.5
    CVE-2026-17613

    CVE-2026-17613

    Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenticated user to overwrite any files on the target server and subscribe to WebSocket events, enabling full data exfiltration and data poisoning.

    penpot penpot
  • High 8.8
    CVE-2026-45805 Public exploit

    Penpot: MCP REPL server binds to 0.0.0.0 with unauthenticated /execute endpoint — RCE

    Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot MCP's mcp/packages/server/src/ReplServer.ts bound the ReplServer to 0.0.0.0:4403 and exposed an unauthenticated /execute endpoint that passed the code field to Plu…

    penpot penpot @penpot/mcp npm
  • High 7.7
    CVE-2026-45806 Public exploit

    Penpot: Authenticated SSRF in remote image import via create-file-media-object-from-url

    Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot's remote image import passed the user-controlled url from frontend/src/app/main/data/workspace/media.cljs into the backend RPC method :create-file-media-object-fro…

    penpot penpot
  • High 7.5
    CVE-2026-26202

    Penpot has Arbitrary File Read via create-font-variant RPC endpoint

    Penpot is an open-source design tool for design and code collaboration. Prior to version 2.13.2, an authenticated user can read arbitrary files from the server by supplying a local file path (e.g. `/etc/passwd`) as a font data chunk in the `create-font-varian…

    penpot penpot