CVE-2026-106503

Summary

An authenticated user can bypass authorization controls on Scaffolder templates in Backstage, potentially gaining unauthorized access to source control resources. This vulnerability allows attackers to execute restricted scaffolder actions they shouldn't be able to perform.

Exploitability

The exploit requires an authenticated user with access to affected Scaffolder templates, making it moderately difficult to exploit but not highly complex.

Blast radius

If exploited, this could allow unauthorized access to repositories and source-control resources, potentially leading to code injection, data exfiltration, or privilege escalation within the development environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 3.3.1, 3.4.1, 4.0.3, or 4.1.0 of the @backstage/plugin-scaffolder-backend package.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.