CVE-2026-108258 · GHSA-47c3-hpmg-7j6p

Shiny for Python has path traversal in bookmark restore

Risk score: 57/100
CVSS: 6.9 v4.0
Exploit chance (30 days): 0.4%
Published: 9 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied state_id and joins it into the server-side shiny_bookmarks directory without validating that it is a single safe path segment. An unauthenticated request can use paren…
Affected: shiny (pip) >= 1.4.0, <= 1.6.3
Fix: Upgrade shiny to 1.6.4 or later.
Exploitation: No known exploitation

Why it is Yellow

CVSS 6.9 medium
On your watchlist: python, PyPI

Affected packages

Package	Ecosystem	Vulnerable	Fixed in
shiny	pip	>= 1.4.0, <= 1.6.3	1.6.4

References

Original description

Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied state_id and joins it into the server-side shiny_bookmarks directory without validating that it is a single safe path segment. An unauthenticated request can use parent-directory segments or an absolute path to make the server open input.json and values.json outside the bookmark store, even when bookmark_store is set to disable. In applications configured with bookmark_store set to server and using ui.input_file(), the restore handler can additionally copy and expose an attacker-selected file from an attacker-selected directory. This issue is fixed in version 1.6.4.

Last activity 9 Oct 2026. Patch Forecast updates every hour.