The flaw in the render_jinja_template endpoint permits users with only print permissions on a document to supply arbitrary Jinja template strings. The server processes these strings and evaluates embedded SQL expressions, enabling the execution of SELECT statements against tables unrelated to the target document. An attacker could thereby read sensitive data such as password hashes stored in the __Auth table, effectively exposing authentication credentials. The vulnerability does not directly provide code execution but allows a significant privilege elevation from read‑only access to arbitrary data disclosure.

The vulnerability is present in development builds of the Frappe Framework supplied by the frappe vendor. No specific version range is listed; any commit before the fix at commit 37d2eb597... is potentially affected.

The CVSS score of 7.1 indicates a high impact severity. The EPSS score is not listed, so the current exploit probability cannot be quantified, but the lack of KEV listing also suggests it has not yet been widely exploited. The incident would be triggered through a web request to the preview endpoint, requiring only print permissions on any document, a privilege that many low‑level users commonly have. Because the flaw allows the injection of arbitrary SELECT statements, legitimate users can readily exploit it if they can craft the request, raising the practical risk to organizations running recent development versions of Frappe.