CVE-2026-119144 — Frappe Framework SSTI, CVSS 8.8
The CVE describes DB read/write via Jinja2 template injection. The August research describes the full chain: frappe.new_doc writes a Python file, frappe.db.set_value registers it as an installed app, frappe.call executes it. Shell as the frappe user.
The only sandbox was a string check for ".__" — bypassed by calling privileged functions by name.
Patch: 15.111.0 / 16.21.0 (Framework), 15.119.1 / 16.32.0 (ERPNext).