mbanyamer/-cve-2026-26215-manga-image-translator-rceProof-of-concept exploit for CVE-2026-26215, an unauthenticated remote code execution vulnerability in manga-image-translator via unsafe pickle deserialization.
Instagram: @banyamer_security
GitHub: @mbanyamer
Proof-of-Concept exploit for CVE-2026-26215 - Unauthenticated Remote Code Execution via unsafe Pickle deserialization in manga-image-translator ≤ beta-0.3.
CVE-2026-26215 is an unauthenticated remote code execution vulnerability in manga-image-translator versions ≤ beta-0.3 running in shared API mode.
The endpoints /execute/{method_name} and /simple_execute/{method_name} deserialize attacker-controlled request bodies using pickle.loads() without any validation. The nonce-based authentication mechanism is completely bypassed as it defaults to an empty string.
This allows:
| Status | Version |
|---|---|
| ❌ Vulnerable | manga-image-translator ≤ beta-0.3 |
| ✅ Patched | Not yet released |
Tested on: Docker (zyddnys/manga-image-translator:main), Linux
| Vector | Description |
|---|---|
| CVSS v4 | 9.3 (Critical) - AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H |
| Authentication | None - Completely unauthenticated |
| Attack Vector | Network |
| Complexity | Low |
pickle.loads(await request.body()) called directly on attacker inputself.nonce defaults to None, skipping the nonce check entirely/execute/ and /simple_execute/ exposed without proper access controlsgraph LR
A[Attacker crafts malicious pickle payload] --> B[Sends POST request to /execute/translate]
B --> C[Server calls pickle.loads on request body]
C --> D[__reduce__ method executes]
D --> E[os.system called with attacker command]
E --> F[Remote code execution]