Nixpkgs security tracker

Untriaged

Permalink CVE-2026-29514

8.8 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

updated an hour ago by @LeSuisse Activity log

Created suggestion 1 day, 5 hours ago
@LeSuisse ignored reference https://w… an hour ago
@LeSuisse ignored package netbox_4_2 an hour ago

NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin

NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the RenderTemplateMixin.get_environment_params() method that allows authenticated users with exporttemplate or configtemplate permissions to execute arbitrary code by specifying malicious Python callables in the environment_params field. Attackers can bypass Jinja2 SandboxedEnvironment protections by setting the finalize parameter to any importable Python callable such as subprocess.getoutput, which is invoked on every rendered expression outside the sandbox's call interception mechanism, achieving remote code execution as the NetBox service user.

References

https://chocapikk.com/posts/2026/netbox-export-template-rce/ exploittechnical-description
https://github.com/netbox-community/netbox/issues/22079 issue-tracking
https://github.com/netbox-community/netbox/pull/22078 issue-tracking

Ignored references (1)

https://www.vulncheck.com/advisories/netbox-rce-via-rendertemplatemixin third-party-advisory

Affected products

netbox

=<4.5.4

Matching in nixpkgs

pkgs.netbox

IP address management (IPAM) and data center infrastructure management (DCIM) tool

nixos-unstable 4.5.7
- nixpkgs-unstable 4.5.7
- nixos-unstable-small 4.5.7
nixos-25.11 4.4.10
- nixos-25.11-small 4.4.10
- nixpkgs-25.11-darwin 4.4.10

pkgs.netbox_4_3

IP address management (IPAM) and data center infrastructure management (DCIM) tool

nixos-25.11 4.3.7
- nixos-25.11-small 4.3.7
- nixpkgs-25.11-darwin 4.3.7

pkgs.netbox_4_4

IP address management (IPAM) and data center infrastructure management (DCIM) tool

nixos-unstable 4.4.10
- nixpkgs-unstable 4.4.10
- nixos-unstable-small 4.4.10
nixos-25.11 4.4.10
- nixos-25.11-small 4.4.10
- nixpkgs-25.11-darwin 4.4.10

pkgs.netbox_4_5

IP address management (IPAM) and data center infrastructure management (DCIM) tool

nixos-unstable 4.5.7
- nixpkgs-unstable 4.5.7
- nixos-unstable-small 4.5.7

pkgs.netbox2netshot

Inventory synchronization tool between Netbox and Netshot

nixos-unstable 0.2.0
- nixpkgs-unstable 0.2.0
- nixos-unstable-small 0.2.0
nixos-25.11 0.2.0
- nixos-25.11-small 0.2.0
- nixpkgs-25.11-darwin 0.2.0

pkgs.pkgsRocm.netbox

IP address management (IPAM) and data center infrastructure management (DCIM) tool

nixos-unstable 4.5.7
- nixpkgs-unstable 4.5.7
- nixos-unstable-small 4.5.7

pkgs.pkgsRocm.netbox_4_4

IP address management (IPAM) and data center infrastructure management (DCIM) tool

nixos-unstable 4.4.10
- nixpkgs-unstable 4.4.10
- nixos-unstable-small 4.4.10

pkgs.python312Packages.pynetbox

API client library for Netbox

nixos-25.11 7.5.0
- nixos-25.11-small 7.5.0
- nixpkgs-25.11-darwin 7.5.0

pkgs.python313Packages.pynetbox

API client library for Netbox

nixos-unstable 7.6.1
- nixpkgs-unstable 7.6.1
- nixos-unstable-small 7.6.1
nixos-25.11 7.5.0
- nixos-25.11-small 7.5.0
- nixpkgs-25.11-darwin 7.5.0

pkgs.python314Packages.pynetbox

API client library for Netbox

nixos-unstable 7.6.1
- nixpkgs-unstable 7.6.1
- nixos-unstable-small 7.6.1

pkgs.python312Packages.netbox-bgp

NetBox plugin for BGP related objects documentation

nixos-25.11 0.17.0
- nixos-25.11-small 0.17.0
- nixpkgs-25.11-darwin 0.17.0

pkgs.python312Packages.netbox-dns

Netbox plugin for managing DNS data

nixos-25.11 1.4.2
- nixos-25.11-small 1.4.2
- nixpkgs-25.11-darwin 1.4.2

pkgs.python313Packages.netbox-bgp

NetBox plugin for BGP related objects documentation

nixos-unstable 0.18.0
- nixpkgs-unstable 0.18.1
- nixos-unstable-small 0.18.1
nixos-25.11 0.17.0
- nixos-25.11-small 0.17.0
- nixpkgs-25.11-darwin 0.17.0

pkgs.python313Packages.netbox-dns

Netbox plugin for managing DNS data

nixos-unstable 1.4.6
- nixpkgs-unstable 1.5.7
- nixos-unstable-small 1.5.7
nixos-25.11 1.4.2
- nixos-25.11-small 1.4.2
- nixpkgs-25.11-darwin 1.4.2

pkgs.python314Packages.netbox-bgp

NetBox plugin for BGP related objects documentation

nixos-unstable 0.18.0
- nixpkgs-unstable 0.18.1
- nixos-unstable-small 0.18.1

pkgs.python314Packages.netbox-dns

Netbox plugin for managing DNS data

nixos-unstable 1.4.6
- nixpkgs-unstable 1.5.7
- nixos-unstable-small 1.5.7

pkgs.python312Packages.netbox-qrcode

Netbox plugin for generate QR codes for objects: Rack, Device, Cable

nixos-25.11 0.0.19
- nixos-25.11-small 0.0.19
- nixpkgs-25.11-darwin 0.0.19

pkgs.python313Packages.netbox-qrcode

Netbox plugin for generate QR codes for objects: Rack, Device, Cable

nixos-unstable 0.0.20
- nixpkgs-unstable 0.0.20
- nixos-unstable-small 0.0.20
nixos-25.11 0.0.19
- nixos-25.11-small 0.0.19
- nixpkgs-25.11-darwin 0.0.19

pkgs.python314Packages.netbox-qrcode

Netbox plugin for generate QR codes for objects: Rack, Device, Cable

nixos-unstable 0.0.20
- nixpkgs-unstable 0.0.20
- nixos-unstable-small 0.0.20

pkgs.python312Packages.netbox-routing

NetBox plugin for tracking all kinds of routing information

nixos-25.11 0.3.1
- nixos-25.11-small 0.3.1
- nixpkgs-25.11-darwin 0.3.1

pkgs.python313Packages.netbox-routing

NetBox plugin for tracking all kinds of routing information

nixos-unstable 0.3.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2
nixos-25.11 0.3.1
- nixos-25.11-small 0.3.1
- nixpkgs-25.11-darwin 0.3.1

pkgs.python314Packages.netbox-routing

NetBox plugin for tracking all kinds of routing information

nixos-unstable 0.3.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2

pkgs.python313Packages.netbox-contract

Contract plugin for netbox

nixos-unstable 2.4.5
- nixpkgs-unstable 2.4.5
- nixos-unstable-small 2.4.5
nixos-25.11 2.4.2
- nixos-25.11-small 2.4.2
- nixpkgs-25.11-darwin 2.4.2

pkgs.python312Packages.netbox-documents

Plugin designed to faciliate the storage of site, circuit, device type and device specific documents within NetBox

nixos-25.11 0.7.4
- nixos-25.11-small 0.7.4
- nixpkgs-25.11-darwin 0.7.4

pkgs.python313Packages.netbox-documents

Plugin designed to faciliate the storage of site, circuit, device type and device specific documents within NetBox

nixos-unstable 0.7.4
- nixpkgs-unstable 0.8.2
- nixos-unstable-small 0.8.2
nixos-25.11 0.7.4
- nixos-25.11-small 0.7.4
- nixpkgs-25.11-darwin 0.7.4

pkgs.python314Packages.netbox-documents

Plugin designed to faciliate the storage of site, circuit, device type and device specific documents within NetBox

nixos-unstable 0.7.4
- nixpkgs-unstable 0.8.2
- nixos-unstable-small 0.8.2

pkgs.pkgsRocm.python3Packages.netbox-bgp

NetBox plugin for BGP related objects documentation

nixos-unstable 0.18.0
- nixpkgs-unstable 0.18.1
- nixos-unstable-small 0.18.1

pkgs.python313Packages.netbox-attachments

Plugin to manage attachments for any model

nixos-unstable 11.0.1
- nixpkgs-unstable 11.1.0
- nixos-unstable-small 11.1.0
nixos-25.11 9.0.0
- nixos-25.11-small 9.0.0
- nixpkgs-25.11-darwin 9.0.0

pkgs.python312Packages.netbox-contextmenus

Netbox plugin to add context buttons to the links, making navigating less clicky

nixos-25.11 1.4.13
- nixos-25.11-small 1.4.13
- nixpkgs-25.11-darwin 1.4.13

pkgs.python312Packages.netbox-reorder-rack

NetBox plugin to allow users to reorder devices within a rack using a drag and drop UI

nixos-25.11 1.1.4
- nixos-25.11-small 1.1.4
- nixpkgs-25.11-darwin 1.1.4

pkgs.python313Packages.netbox-contextmenus

Netbox plugin to add context buttons to the links, making navigating less clicky

nixos-unstable 1.4.14
- nixpkgs-unstable 1.4.14
- nixos-unstable-small 1.4.14
nixos-25.11 1.4.13
- nixos-25.11-small 1.4.13
- nixpkgs-25.11-darwin 1.4.13

pkgs.python313Packages.netbox-reorder-rack

NetBox plugin to allow users to reorder devices within a rack using a drag and drop UI

nixos-unstable 1.1.4
- nixpkgs-unstable 1.1.4
- nixos-unstable-small 1.1.4
nixos-25.11 1.1.4
- nixos-25.11-small 1.1.4
- nixpkgs-25.11-darwin 1.1.4

pkgs.python314Packages.netbox-contextmenus

Netbox plugin to add context buttons to the links, making navigating less clicky

nixos-unstable 1.4.14
- nixpkgs-unstable 1.4.14
- nixos-unstable-small 1.4.14

pkgs.python314Packages.netbox-reorder-rack

NetBox plugin to allow users to reorder devices within a rack using a drag and drop UI

nixos-unstable 1.1.4
- nixpkgs-unstable 1.1.4
- nixos-unstable-small 1.1.4

pkgs.pkgsRocm.python3Packages.netbox-qrcode

Netbox plugin for generate QR codes for objects: Rack, Device, Cable

nixos-unstable 0.0.20
- nixpkgs-unstable 0.0.20
- nixos-unstable-small 0.0.20

pkgs.python313Packages.netbox-napalm-plugin

Netbox plugin for Napalm integration

nixos-unstable 0.3.4
- nixpkgs-unstable 0.3.4
- nixos-unstable-small 0.3.4
nixos-25.11 0.3.3
- nixos-25.11-small 0.3.3
- nixpkgs-25.11-darwin 0.3.3

pkgs.pkgsRocm.python3Packages.netbox-routing

NetBox plugin for tracking all kinds of routing information

nixos-unstable 0.3.2
- nixpkgs-unstable 0.4.2
- nixos-unstable-small 0.4.2

pkgs.python313Packages.netbox-topology-views

Netbox plugin for generate topology views/maps from your devices

nixos-unstable 4.5.0
- nixpkgs-unstable 4.5.1
- nixos-unstable-small 4.5.1
nixos-25.11 4.4.0
- nixos-25.11-small 4.4.0
- nixpkgs-25.11-darwin 4.4.0

pkgs.terraform-providers.e-breuninger_netbox

None

nixos-unstable 5.3.0
- nixpkgs-unstable 5.3.0
- nixos-unstable-small 5.3.0
nixos-25.11 5.0.0
- nixos-25.11-small 5.0.0
- nixpkgs-25.11-darwin 5.0.0

pkgs.pkgsRocm.python3Packages.netbox-contract

Contract plugin for netbox

nixos-unstable 2.4.5
- nixpkgs-unstable 2.4.5
- nixos-unstable-small 2.4.5

pkgs.pkgsRocm.python3Packages.netbox-documents

Plugin designed to faciliate the storage of site, circuit, device type and device specific documents within NetBox

nixos-unstable 0.7.4
- nixpkgs-unstable 0.8.2
- nixos-unstable-small 0.8.2

pkgs.python313Packages.netbox-floorplan-plugin

Netbox plugin providing floorplan mapping capability for locations and sites

nixos-unstable 0.9.1
- nixpkgs-unstable 0.9.1
- nixos-unstable-small 0.9.1
nixos-25.11 0.8.0
- nixos-25.11-small 0.8.0
- nixpkgs-25.11-darwin 0.8.0

pkgs.pkgsRocm.python3Packages.netbox-attachments

Plugin to manage attachments for any model

nixos-unstable 11.0.1
- nixpkgs-unstable 11.1.0
- nixos-unstable-small 11.1.0

pkgs.pkgsRocm.python3Packages.netbox-reorder-rack

NetBox plugin to allow users to reorder devices within a rack using a drag and drop UI

nixos-unstable 1.1.4
- nixpkgs-unstable 1.1.4
- nixos-unstable-small 1.1.4

pkgs.pkgsRocm.python3Packages.netbox-napalm-plugin

Netbox plugin for Napalm integration

nixos-unstable 0.3.4
- nixpkgs-unstable 0.3.4
- nixos-unstable-small 0.3.4

pkgs.python312Packages.netbox-plugin-prometheus-sd

Netbox plugin to provide Netbox entires to Prometheus HTTP service discovery

nixos-25.11 1.2.0
- nixos-25.11-small 1.2.0
- nixpkgs-25.11-darwin 1.2.0

pkgs.python313Packages.netbox-plugin-prometheus-sd

Netbox plugin to provide Netbox entires to Prometheus HTTP service discovery

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0
nixos-25.11 1.2.0
- nixos-25.11-small 1.2.0
- nixpkgs-25.11-darwin 1.2.0

pkgs.python314Packages.netbox-plugin-prometheus-sd

Netbox plugin to provide Netbox entires to Prometheus HTTP service discovery

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0

pkgs.pkgsRocm.python3Packages.netbox-topology-views

Netbox plugin for generate topology views/maps from your devices

nixos-unstable 4.5.0
- nixpkgs-unstable 4.5.1
- nixos-unstable-small 4.5.1

pkgs.pkgsRocm.python3Packages.netbox-floorplan-plugin

Netbox plugin providing floorplan mapping capability for locations and sites

nixos-unstable 0.9.1
- nixpkgs-unstable 0.9.1
- nixos-unstable-small 0.9.1

pkgs.python312Packages.netbox-interface-synchronization

Netbox plugin to compare and synchronize interfaces between devices and device types

nixos-25.11 4.1.7
- nixos-25.11-small 4.1.7
- nixpkgs-25.11-darwin 4.1.7

pkgs.python313Packages.netbox-interface-synchronization

Netbox plugin to compare and synchronize interfaces between devices and device types

nixos-unstable 4.1.7
- nixpkgs-unstable 4.5.8
- nixos-unstable-small 4.5.8
nixos-25.11 4.1.7
- nixos-25.11-small 4.1.7
- nixpkgs-25.11-darwin 4.1.7

pkgs.python314Packages.netbox-interface-synchronization

Netbox plugin to compare and synchronize interfaces between devices and device types

nixos-unstable 4.1.7
- nixpkgs-unstable 4.5.8
- nixos-unstable-small 4.5.8

pkgs.pkgsRocm.python3Packages.netbox-plugin-prometheus-sd

Netbox plugin to provide Netbox entires to Prometheus HTTP service discovery

nixos-unstable 1.3.0
- nixpkgs-unstable 1.3.0
- nixos-unstable-small 1.3.0

pkgs.pkgsRocm.python3Packages.netbox-interface-synchronization

Netbox plugin to compare and synchronize interfaces between devices and device types

nixos-unstable 4.1.7
- nixpkgs-unstable 4.5.8
- nixos-unstable-small 4.5.8

Ignored packages (1)

pkgs.netbox_4_2

IP address management (IPAM) and data center infrastructure management (DCIM) tool

nixos-25.11 4.2.9
- nixos-25.11-small 4.2.9
- nixpkgs-25.11-darwin 4.2.9

Package maintainers

@RaitoBezarius Ryan Lahfa <ryan@lahfa.xyz>
@minijackson Rémi Nicole <minijackson@riseup.net>
@transcaffeine transcaffeine <transcaffeine@finally.coffee>
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
@felbinger Nico Felbinger <nico@felbinger.eu>
@benley Benjamin Staffin <benley@gmail.com>
@Chaostheorie Cobalt <cobalt@cobalt.rocks>
@xanderio Alexander Sieg <alex@xanderio.de>

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.netbox

pkgs.netbox_4_3

pkgs.netbox_4_4

pkgs.netbox_4_5

pkgs.netbox2netshot

pkgs.pkgsRocm.netbox

pkgs.pkgsRocm.netbox_4_4

pkgs.python312Packages.pynetbox

pkgs.python313Packages.pynetbox

pkgs.python314Packages.pynetbox

pkgs.python312Packages.netbox-bgp

pkgs.python312Packages.netbox-dns

pkgs.python313Packages.netbox-bgp

pkgs.python313Packages.netbox-dns

pkgs.python314Packages.netbox-bgp

pkgs.python314Packages.netbox-dns

pkgs.python312Packages.netbox-qrcode

pkgs.python313Packages.netbox-qrcode

pkgs.python314Packages.netbox-qrcode

pkgs.python312Packages.netbox-routing

pkgs.python313Packages.netbox-routing

pkgs.python314Packages.netbox-routing

pkgs.python313Packages.netbox-contract

pkgs.python312Packages.netbox-documents

pkgs.python313Packages.netbox-documents

pkgs.python314Packages.netbox-documents

pkgs.pkgsRocm.python3Packages.netbox-bgp

pkgs.python313Packages.netbox-attachments

pkgs.python312Packages.netbox-contextmenus

pkgs.python312Packages.netbox-reorder-rack

pkgs.python313Packages.netbox-contextmenus

pkgs.python313Packages.netbox-reorder-rack

pkgs.python314Packages.netbox-contextmenus

pkgs.python314Packages.netbox-reorder-rack

pkgs.pkgsRocm.python3Packages.netbox-qrcode

pkgs.python313Packages.netbox-napalm-plugin

pkgs.pkgsRocm.python3Packages.netbox-routing

pkgs.python313Packages.netbox-topology-views

pkgs.terraform-providers.e-breuninger_netbox

pkgs.pkgsRocm.python3Packages.netbox-contract

pkgs.pkgsRocm.python3Packages.netbox-documents

pkgs.python313Packages.netbox-floorplan-plugin

pkgs.pkgsRocm.python3Packages.netbox-attachments

pkgs.pkgsRocm.python3Packages.netbox-reorder-rack

pkgs.pkgsRocm.python3Packages.netbox-napalm-plugin

pkgs.python312Packages.netbox-plugin-prometheus-sd

pkgs.python313Packages.netbox-plugin-prometheus-sd

pkgs.python314Packages.netbox-plugin-prometheus-sd

pkgs.pkgsRocm.python3Packages.netbox-topology-views

pkgs.pkgsRocm.python3Packages.netbox-floorplan-plugin

pkgs.python312Packages.netbox-interface-synchronization

pkgs.python313Packages.netbox-interface-synchronization

pkgs.python314Packages.netbox-interface-synchronization

pkgs.pkgsRocm.python3Packages.netbox-plugin-prometheus-sd

pkgs.pkgsRocm.python3Packages.netbox-interface-synchronization

pkgs.netbox_4_2

Package maintainers