CVE-2026-33046

Indico discloses local files resulting in Remote Code Execution through LaTeX injection

Published Mar 23, 2026 CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed

Description

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.12, due to vulnerabilities in TeXLive and obscure LaTeX syntax that allowed circumventing Indico's LaTeX sanitizer, it is possible to use specially-crafted LaTeX snippets which can read local files or execute code with the privileges of the user running Indico on the server. Note that if server-side LaTeX rendering is not in use (ie `XELATEX_PATH` was not set in `indico.conf`), this vulnerability does not apply. It is recommended to update to Indico 3.3.12 as soon as possible. It is also strongly recommended to enable the containerized LaTeX renderer (using `podman`), which isolates it from the rest of the system. As a workaround, remove the `XELATEX_PATH` setting from `indico.conf` (or comment it out or set it to `None`) and restart the `indico-uwsgi` and `indico-celery` services to disable LaTeX functionality.

Analysis

Technical impact

A flaw in the LaTeX sanitizer of Indico allows specially crafted LaTeX snippets to bypass security checks and access local files or execute code with the privileges of the process running the server. This can lead to full system compromise if the server’s LaTeX renderer is enabled. If the server is not configured to run server‑side LaTeX (XELATEX_PATH unset), this vulnerability does not apply.

Affected Systems

Indico, the event management platform used by CERN. Versions earlier than 3.3.12 are affected. The vulnerability is tied to the TeXLive integration and the LaTeX sanitizer in these releases.

Risk and Exploitability

The CVSS score of 7.7 reflects a high severity RCE. The EPSS score of less than 1% indicates a low probability of widespread exploitation, and the vulnerability is not listed on the CISA KEV list. Attack likely involves providing a malicious LaTeX payload through the web interface, which the rendering engine processes and executes on the server, allowing an attacker to read files or run arbitrary commands with process privileges.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

indico

affected

Version	Status	Constraints
`< 3.3.12`	affected	—

Configuration 1 [-]

cpe:2.3:a:cern:indico:*:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Indico

Version	Status	Scheme	Platform
`[0,3.3.12)`	affected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade Indico to version 3.3.12 or later.
Enable the containerized LaTeX renderer using podman to isolate processing.
As a temporary workaround, remove or comment out the XELATEX_PATH setting in indico.conf and restart the indico-uwsgi and indico-celery services to disable LaTeX rendering.

Generated by OpenCVE AI on March 24, 2026 at 23:21 UTC.

Tracking

Advisories

Source	ID	Title
Github GHSA	GHSA-rm2q-f7jv-3cfp	Indico discloses local files resulting in Remote Code Execution through LaTeX injection

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements Present

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.814% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://github.com/indico/indico/commit/0adb70f0ed66e129361d447868f5f3eb90dc5e96
https://github.com/indico/indico/commit/1dbb12525b3de14229bf4d1ae192988068f975f6
https://github.com/indico/indico/commit/5f24d23ce9c4b0e4b68b3d0b58987a948fc57c8a
https://github.com/indico/indico/commit/fb169ced710c30cf792ce4b9f48688db0633cfd8
https://github.com/indico/indico/releases/tag/v3.3.12
https://github.com/indico/indico/security/advisories/GHSA-rm2q-f7jv-3cfp

History

Mar 24, 2026 10:00 PM First appearance in the feed. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Cern Cern indico
CPEs		cpe:2.3:a:cern:indico::::::::
Vendors & Products		Cern Cern indico
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Mar 24, 2026 2:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mar 24, 2026 10:45 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Indico Indico indico
Vendors & Products		Indico Indico indico

Mar 24, 2026 2:30 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In versions prior to 3.3.12, due to vulnerabilities in TeXLive and obscure LaTeX syntax that allowed circumventing Indico's LaTeX sanitizer, it is possible to use specially-crafted LaTeX snippets which can read local files or execute code with the privileges of the user running Indico on the server. Note that if server-side LaTeX rendering is not in use (ie `XELATEX_PATH` was not set in `indico.conf`), this vulnerability does not apply. It is recommended to update to Indico 3.3.12 as soon as possible. It is also strongly recommended to enable the containerized LaTeX renderer (using `podman`), which isolates it from the rest of the system. As a workaround, remove the `XELATEX_PATH` setting from `indico.conf` (or comment it out or set it to `None`) and restart the `indico-uwsgi` and `indico-celery` services to disable LaTeX functionality.
Title		Indico discloses local files resulting in Remote Code Execution through LaTeX injection
Weaknesses		CWE-22 CWE-78
References		https://github.com/indico/indico/commit/0adb70f0ed66e129361d447868f5f3eb90dc5e96 https://github.com/indico/indico/commit/1dbb12525b3de14229bf4d1ae192988068f975f6 https://github.com/indico/indico/commit/5f24d23ce9c4b0e4b68b3d0b58987a948fc57c8a https://github.com/indico/indico/commit/fb169ced710c30cf792ce4b9f48688db0633cfd8 https://github.com/indico/indico/releases/tag/v3.3.12 https://github.com/indico/indico/security/advisories/GHSA-rm2q-f7jv-3cfp
Metrics		cvssV4_0 `{'score': 7.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`

Subscriptions

Cern Indico

Indico Indico

Weaknesses

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')