Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe vulnerability exists in the nicegui.elements.restructured_text.prepare_content function. This function uses the docutils library to render reStructuredText. The vulnerability arises because the call to docutils.core.publish_parts did not disable settings that allow for the inclusion of local files from the server's filesystem. Specifically, the file_insertion_enabled and raw_enabled settings were not set to False.
An attacker could exploit this by supplying crafted reStructuredText content to the ui.restructured_text() element. This content would include directives like .. include:: /path/to/local/file or .. csv-table:: :file: /path/to/local/file. The prepare_content function would process this text, and docutils would embed the contents of the specified local file into the resulting HTML. This HTML is then sent to the client, disclosing the contents of the file to the attacker.
The patch addresses this by adding file_insertion_enabled: False, raw_enabled: False, and _disable_config: True to the settings_overrides dictionary passed to publish_parts. This prevents docutils from processing these unsafe directives. The vulnerable prepare_content function is called by the RestructuredText class's constructor (__init__) and its content update handler (_handle_content_change), making these methods the entry points for exploitation.
prepare_contentnicegui/elements/restructured_text.py
RestructuredText.__init__nicegui/elements/restructured_text.py
RestructuredText._handle_content_changenicegui/elements/restructured_text.py
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| nicegui | pip | <= 3.11.1 | 3.12.0 |