CVE-2026-106557

Summary

The Backstage TechDocs plugin failed to properly validate Markdown extension configurations, allowing authenticated users to access resources outside the intended documentation boundary. This could lead to exposure of backend data or internal network resources.

Exploitability

Moderately difficult to exploit as it requires an authenticated user with permissions to register or modify documentation sources, but the attack vector is straightforward once prerequisites are met.

Blast radius

The impact could be significant as authenticated users could potentially access sensitive backend data or internal network resources through TechDocs builds, affecting multiple services that rely on documentation hosting.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Backstage versions 1.14.6 or 1.15.4, ensuring pymdown-extensions 10.21.3 or later is used through mkdocs-techdocs-core 1.7.0 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.