Description
Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without any sanitization. Because the backend applies only a length check and the frontend writes comment content directly through innerHTML, any team member who can comment on a shared file can embed HTML such as an image error handler or script that executes in the browser of every other collaborator. The attack is passive: any user who opens the comments panel on the affected file triggers script execution on the Penpot origin, allowing theft of session cookies, actions performed as the victim, and access to their files and projects. This issue is fixed in version 2.15.3.
Published: 2026-08-26
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Penpot versions up to 2.14.3 store comment text without sanitizing characters that are later rendered with innerHTML. This flaw allows an attacker to embed arbitrary JavaScript or HTML fragments in a comment, which is executed in the browsers of every collaborator when the comment panel is opened. The attack is passive; it can hijack session cookies, perform actions on behalf of the user, and provide access to files and projects on the Penpot origin.

Affected Systems

All Penpot deployments running 2.14.3 or earlier are affected. Updating to 2.15.3 or later removes the vulnerability.

Risk and Exploitability

The CVSS score of 8.7 indicates high severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is that any team member with permission to post comments can embed malicious content, and any collaborator who views the comment panel will trigger script execution. The exploitation requires no special privileges beyond commenting rights, making it relatively easy to deploy once the environment is accessible.

Generated by OpenCVE AI on August 27, 2026 at 00:20 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Penpot instance to version 2.15.3 or newer.
  • Restrict comment posting rights to trusted users or disable comments on sensitive files.
  • Apply a Content‑Security‑Policy header to mitigate script execution risk when a comment injection fails.

Generated by OpenCVE AI on August 27, 2026 at 00:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 27 Aug 2026 00:45:00 +0000

Type Values Removed Values Added
First Time appeared Penpot
Penpot penpot
Vendors & Products Penpot
Penpot penpot

Wed, 26 Aug 2026 23:15:00 +0000

Type Values Removed Values Added
Description Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without any sanitization. Because the backend applies only a length check and the frontend writes comment content directly through innerHTML, any team member who can comment on a shared file can embed HTML such as an image error handler or script that executes in the browser of every other collaborator. The attack is passive: any user who opens the comments panel on the affected file triggers script execution on the Penpot origin, allowing theft of session cookies, actions performed as the victim, and access to their files and projects. This issue is fixed in version 2.15.3.
Title Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML
Weaknesses CWE-79
References
Metrics cvssV3_1

{'score': 8.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N'}

Subscriptions

Penpot Penpot
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-08-26T22:50:34.362Z

Reserved: 2026-05-19T21:10:38.797Z

Link: CVE-2026-47665

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-26T23:17:13.693

Modified: 2026-08-26T23:17:13.693

Link: CVE-2026-47665

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-27T00:30:14Z

Weaknesses
  • CWE-79

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')