StackRadar

CVE-2026-104851

High

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
90
of 18,026 indexed, latest versions
Container images
81
deployed by those charts
Fix available
1 of 1
affected package

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

Carried by container images the latest versions of 90 of 18,026 indexed charts deploy, on 81 images.

Affected packageAffected versionsFixed inImages
fsspecpypi2022.11.0, 2023.12.2, 2024.2.0, 2024.3.1+17 more2026.6.081
OSV records
GHSA-27vj-qcqg-25rc

Charts affected

90 by stars
ChartLatestAffected imagesRadar Score
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
fsspec@2026.4.0
2026.6.0

Open the chart page →

4,190
flyte-devboxflyte0.1.01 of 14See more

flyte-devbox flyte 0.1.0

1 of the 14 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
fsspec@2026.4.0
2026.6.0

Open the chart page →

10,970
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latestae874f70cc16
fsspec@2025.2.0
2026.6.0

Open the chart page →

7,313
immichhelmforgeVerified publisher1.2.91 of 5See more

immich helmforge 1.2.9

1 of the 5 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
fsspec@2023.12.2
2026.6.0

Open the chart page →

12,940
langflowhelmforgeVerified publisher2.0.21 of 1See more

langflow helmforge 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
langflowai/langflow:1.12.334055a07d446
fsspec@2026.2.0
2026.6.0

Open the chart page →

492
paperlesshpVerified publisher0.1.21 of 5See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
fsspec@2026.1.0
2026.6.0

Open the chart page →

31,703
guardrails-usvcinfracloud-chartsVerified publisher1.0.11 of 1See more

guardrails-usvc infracloud-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/guardrails-tgi:latestf68bec6a1271
fsspec@2024.2.0
2026.6.0

Open the chart page →

5,518
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
fsspec@2026.3.0
2026.6.0

Open the chart page →

11,283
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
fsspec@2024.12.0
2026.6.0

Open the chart page →

9,493
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
fsspec@2025.2.0
2026.6.0

Open the chart page →

6,454
servicesmicroslacVerified publisher0.4.01 of 8See more

services microslac 0.4.0

1 of the 8 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
microslac/chat:latest417317e4e4e8
fsspec@2024.3.1
2026.6.0

Open the chart page →

34,113
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
fsspec@2026.2.0
2026.6.0

Open the chart page →

3,107
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
fsspec@2026.1.0
2026.6.0

Open the chart page →

5,850
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest60e83a098ae4
fsspec@2025.10.0
2026.6.0

Open the chart page →

8,959
chatbot-ai-sampleopenshift0.1.61 of 4See more

chatbot-ai-sample openshift 0.1.6

1 of the 4 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
fsspec@2025.5.1
2026.6.0

Open the chart page →

20,603
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
fsspec@2026.3.0
2026.6.0

Open the chart page →

234,921
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
fsspec@2026.3.0
2026.6.0

Open the chart page →

8,081
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
fsspec@2025.12.0
2026.6.0

Open the chart page →

5,779
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
fsspec@2024.6.1
2026.6.0

Open the chart page →

5,934
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
fsspec@2024.9.0
2026.6.0

Open the chart page →

23,519
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
fsspec@2024.10.0
2026.6.0

Open the chart page →

10,735
tandoorrtomik-helm-chartsVerified publisher0.0.11 of 1See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
vabene1111/recipes:2.3.50f8d061895e9
fsspec@2025.10.0
2026.6.0

Open the chart page →

4,891
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
fsspec@2023.12.2
2026.6.0

Open the chart page →

11,442
search-proxysearch-proxy2026.40.01 of 1See more

search-proxy search-proxy 2026.40.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/unique-ag/ai/search-proxy:2026.40.02bd74586650d
fsspec@2026.4.0
2026.6.0

Open the chart page →

1,766
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
litellm/litellm-non_root:v1.82.3-stable09b217802ded
fsspec@2026.2.0
2026.6.0

Open the chart page →

6,095
servicexssl-hep1.8.61 of 16See more

servicex ssl-hep 1.8.6

1 of the 16 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
fsspec@2025.12.0
2026.6.0

Open the chart page →

61,380
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
fsspec@2026.2.0
2026.6.0

Open the chart page →

4,102
asrtest-opea1.0.01 of 1See more

asr test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/asr:1.025dd26d9cd09
fsspec@2024.2.0
2026.6.0

Open the chart page →

4,783
chatqnatest-opea1.0.04 of 11See more

chatqna test-opea 1.0.0

4 of the 11 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
fsspec@2024.2.0
2026.6.0
opea/llm-tgi:1.00c25aab3f106
fsspec@2024.9.0
2026.6.0
opea/reranking-tei:1.0e48613afb191
fsspec@2024.2.0
2026.6.0
opea/retriever-redis:1.0eb746b263705
fsspec@2024.2.0
2026.6.0

Open the chart page →

42,605
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
fsspec@2024.9.0
2026.6.0

Open the chart page →

31,401
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
fsspec@2024.9.0
2026.6.0

Open the chart page →

30,897
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/llm-docsum-tgi:1.002f9e8fa5d71
fsspec@2024.2.0
2026.6.0

Open the chart page →

31,399
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
fsspec@2024.2.0
2026.6.0

Open the chart page →

5,641
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
fsspec@2024.2.0
2026.6.0

Open the chart page →

5,676
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
fsspec@2024.9.0
2026.6.0

Open the chart page →

5,144
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
fsspec@2024.2.0
2026.6.0

Open the chart page →

5,434
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
fsspec@2024.2.0
2026.6.0

Open the chart page →

5,649
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
fsspec@2024.2.0
2026.6.0

Open the chart page →

10,403
ttstest-opea1.0.01 of 1See more

tts test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/tts:1.0257ae94709e9
fsspec@2024.2.0
2026.6.0

Open the chart page →

4,765
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
fsspec@2024.9.0
2026.6.0

Open the chart page →

5,857

Container images carrying it

81 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
opendatacube/wps:latest80df355a660b
fsspec@2025.3.2
2026.6.0
1
openmined/syft-backend:0.9.5b72f74a68b32
fsspec@2024.6.1
2026.6.0
1
pangeo/base-notebook:2024.01.155fbe688a4f80
fsspec@2023.12.2
2026.6.0
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
fsspec@2024.6.1
2026.6.0
1
redash/redash:25.8.000d813437db5
fsspec@2025.3.0
2026.6.0
1
redash/redash:26.3.0c5c9148f5c38
fsspec@2025.3.0
2026.6.0
1
sruthitanneru/pi-sample:ui-lateste565ea454ffd
fsspec@2024.10.0
2026.6.0
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
fsspec@2025.12.0
2026.6.0
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
fsspec@2025.2.0
2026.6.0
1
vabene1111/recipes:2.3.50f8d061895e9
fsspec@2025.10.0
2026.6.0
1
yetiplatform/yeti:2.9.09bcbe2650a14
fsspec@2026.3.0
2026.6.0
1
yetiplatform/yeti:latest9c3006cedcca
fsspec@2026.3.0
2026.6.0
1
ghcr.io/berriai/litellm:1.102.0:main-stable32cfd7a427f6
fsspec@2026.4.0
2026.6.0
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
fsspec@2025.7.0
2026.6.0
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
fsspec@2024.10.0
2026.6.0
1
ghcr.io/dask/dask:2024.1.0080150de7d86
fsspec@2023.12.2
2026.6.0
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
fsspec@2026.2.0
2026.6.0
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
fsspec@2023.12.2
2026.6.0
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
fsspec@2025.9.0
2026.6.0
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
fsspec@2024.6.1
2026.6.0
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
fsspec@2025.12.0
2026.6.0
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
fsspec@2023.12.2
2026.6.0
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
fsspec@2026.2.0
2026.6.0
1
ghcr.io/observal/observal-api:1.14.05a20125eafd4
fsspec@2026.4.0
2026.6.0
1
ghcr.io/opendatacube/explorer:latest7c25578068cd
fsspec@2026.4.0
2026.6.0
1
ghcr.io/open-telemetry/demo:3.1.0-chatbot604b1f493c92
fsspec@2026.4.0
2026.6.0
1
ghcr.io/unique-ag/ai/search-proxy:2026.40.02bd74586650d
fsspec@2026.4.0
2026.6.0
1
ghcr.io/vinny1892/octantis:latest45459c0910fc
fsspec@2026.2.0
2026.6.0
1
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
fsspec@2025.9.0
2026.6.0
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
fsspec@2025.5.1
2026.6.0
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
fsspec@2026.4.0
2026.6.0
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.