Lodash <4.18.0 _.template key-names RCE
CVE-2026-4800 Published on March 31, 2026

lodash vulnerable to Code Injection via `_.template` imports key names
Impact: The fix for CVE-2021-23337 (https://github.com/advisories/GHSA-35jh-r3h4-6jhm) added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. When an application passes untrusted input as options.imports key names, an attacker can inject default-parameter expressions that execute arbitrary code at template compilation time. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function(). Patches: Users should upgrade to version 4.18.0. Workarounds: Do not pass untrusted input as key names in options.imports. Only use developer-controlled, static key names.

NVD

Vulnerability Analysis

CVE-2026-4800 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:

NETWORK

Attack Complexity:

HIGH

Privileges Required:

NONE

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

HIGH

Integrity Impact:

HIGH

Availability Impact:

HIGH

Weakness Type

What is a Code Injection Vulnerability?

The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

CVE-2026-4800 has been classified to as a Code Injection vulnerability or weakness.

Products Associated with CVE-2026-4800

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2026-4800 are published in these products:

Lodash

Red Hat Kafka

Canonical Ubuntu Linux

Red Hat Ansible Automation Platform

Red Hat Ansible Automation Platform Developer

Red Hat Ansible Automation Platform Inside

Red Hat Cryostat

Red Hat Enterprise Linux (RHEL)

Red Hat Enterprise Linux Eus

Red Hat Rhel Aus

Red Hat Rhel Eus Long Life

Red Hat Rhel E4s

Red Hat Rhel Tus

Red Hat Rhel Eus

Red Hat Migration Toolkit Virtualization

Red Hat Network Observ Optr

Red Hat Jboss Data Grid

Red Hat Rhdh

Red Hat Openshift Ai

Red Hat Openshift

Red Hat Openshift Devspaces

Red Hat Openshift Gitops

Red Hat Service Mesh

Red Hat Openshift Distributed Tracing

Red Hat Openshift Data Foundation

Red Hat Satellite

Red Hat Trusted Artifact Signer

Red Hat Amq Streams

Red Hat Confidential Compute Attestation

Red Hat Logging

Red Hat Migration Toolkit Applications

Red Hat Rhmt

Red Hat Workload Availability Nhc

Red Hat Openshift Lightspeed

Red Hat Openshift Pipelines

Red Hat 3scale Amp

Red Hat Advanced Cluster Security

Red Hat Apache Camel Hawtio

Red Hat Service Registry

Red Hat Apicurio Registry

Red Hat Build Keycloak

Red Hat Podman Desktop

Red Hat Connectivity Link

Red Hat Discovery

Red Hat Edge Manager

Red Hat Enterprise Linux Ai

Red Hat Jboss Fuse

Red Hat Jboss Enterprise Application Platform

Red Hat Container Native Virtualization

Red Hat Jboss Enterprise Bpms Platform

Red Hat Single Sign On

Red Hat Trusted Profile Analyzer

Red Hat Ansible Portal

Red Hat Gatekeeper

Red Hat Multicluster Engine

Red Hat Acm

Red Hat Directory Server

Red Hat Jbosseapxp

Red Hat Quay

Red Hat Cluster Observability Operator

Affected Versions

lodash:

Version 4.0.0 and below 4.18.0 is affected.
Version 4.18.0 is unaffected.

lodash-es:

Version 4.0.0 and below 4.18.0 is affected.
Version 4.18.0 is unaffected.

lodash-amd:

Version 4.0.0 and below 4.18.0 is affected.
Version 4.18.0 is unaffected.

lodash.template:

Version 4.0.0 and below 4.18.0 is affected.
Version 4.18.0 is unaffected.

Red Hat Cryostat 4 on RHEL 9:

Version 4.2.0-9 and below * is unaffected.

Red Hat Cryostat 4 on RHEL 9:

Version 4.2.0-9 and below * is unaffected.

Red Hat Ansible Automation Platform 2.6 for RHEL 9:

Version 0:2.6.9-1.el9ap and below * is unaffected.

Red Hat Data Grid 8.6.1: Red Hat Enterprise Linux 10:

Version 0:0.12.1-1.el10_1.3 and below * is unaffected.
Version 0:0.12.2-3.el10_2.1 and below * is unaffected.

Red Hat Enterprise Linux 10:

Version 0:94.3-1.el10_2 and below * is unaffected.

Red Hat Enterprise Linux 10.0 Extended Update Support:

Version 0:0.12.0-3.el10_0.5 and below * is unaffected.

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support:

Version 0:0.10.8-1.el8_4.11 and below * is unaffected.

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On:

Version 0:0.10.8-1.el8_4.11 and below * is unaffected.

Red Hat Enterprise Linux 8.6 Telecommunications Update Service:

Version 0:0.10.12-6.el8_6.13 and below * is unaffected.

Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions:

Version 0:0.10.12-6.el8_6.13 and below * is unaffected.

Red Hat Enterprise Linux 8.8 Telecommunications Update Service:

Version 0:0.10.15-4.el8_8.11 and below * is unaffected.

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions:

Version 0:0.10.15-4.el8_8.11 and below * is unaffected.

Red Hat Enterprise Linux 9:

Version 0:0.11.10-1.el9_7.3 and below * is unaffected.
Version 0:0.11.11-2.el9_8.1 and below * is unaffected.

Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions:

Version 0:0.11.1-10.el9_0.11 and below * is unaffected.

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions:

Version 0:0.11.4-7.el9_2.8 and below * is unaffected.

Red Hat Enterprise Linux 9.4 Extended Update Support:

Version 0:0.11.7-2.el9_4.7 and below * is unaffected.

Red Hat Enterprise Linux 9.6 Extended Update Support:

Version 0:0.11.9-2.el9_6.4 and below * is unaffected.

Red Hat Streams for Apache Kafka 2.9.4: Red Hat Streams for Apache Kafka 3.2.0: Red Hat Cluster Observability Operator 1.5.0:

Version 1782839279 and below * is unaffected.

Red Hat Cluster Observability Operator 1.5.0:

Version 1782840539 and below * is unaffected.

Red Hat Cluster Observability Operator 1.5.0:

Version 1782839996 and below * is unaffected.

Red Hat Migration Toolkit for Virtualization 2.1:

Version 1779139872 and below * is unaffected.

Red Hat Migration Toolkit for Virtualization 2.9:

Version 1778927462 and below * is unaffected.

Red Hat Network Observability (NETOBSERV) 1.11.2:

Version 1778508956 and below * is unaffected.

Red Hat Network Observability (NETOBSERV) 1.11.2:

Version 1778510461 and below * is unaffected.

Red Hat Ansible Automation Platform 2.5:

Version 1777403872 and below * is unaffected.

Red Hat Ansible Automation Platform 2.6:

Version 1777387242 and below * is unaffected.

Red Hat Developer Hub 1.8:

Version 1776784286 and below * is unaffected.

Red Hat Developer Hub 1.9:

Version 1777903262 and below * is unaffected.

Red Hat Edge Manager 1.0:

Version 1783502765 and below * is unaffected.

Red Hat Edge Manager 1.0:

Version 1783502438 and below * is unaffected.

Red Hat Edge Manager 1.1:

Version 1784194938 and below * is unaffected.

Red Hat Edge Manager 1.1:

Version 1784194574 and below * is unaffected.

Red Hat Edge Manager 1.1:

Version 1784126822 and below * is unaffected.

Red Hat Edge Manager 1.1:

Version 1784127736 and below * is unaffected.

Red Hat OpenShift AI 2.25:

Version 1780467029 and below * is unaffected.

Red Hat OpenShift AI 2.25:

Version 1780467147 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1779189627 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1778473763 and below * is unaffected.

Red Hat OpenShift AI 3.3:

Version 1778666987 and below * is unaffected.

Red Hat OpenShift Container Platform 4.16:

Version 1782934080 and below * is unaffected.

Red Hat OpenShift Container Platform 4.17:

Version 1778517109 and below * is unaffected.

Red Hat OpenShift Container Platform 4.17:

Version 1782269794 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

Version 1778256287 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

Version 1779874967 and below * is unaffected.

Red Hat OpenShift Container Platform 4.19:

Version 1779256322 and below * is unaffected.

Red Hat OpenShift Container Platform 4.19:

Version 1779249920 and below * is unaffected.

Red Hat OpenShift Container Platform 4.2:

Version 1778644858 and below * is unaffected.

Red Hat OpenShift Container Platform 4.2:

Version 1778645008 and below * is unaffected.

Red Hat OpenShift Container Platform 4.21:

Version 1783502338 and below * is unaffected.

Red Hat OpenShift Container Platform 4.22:

Version 1782224390 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778076673 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778076741 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778076916 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778077421 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778076861 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778077066 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778077002 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778077164 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778077913 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778077379 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778077455 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778077447 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778078096 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778077527 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778077651 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778077920 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778077737 and below * is unaffected.

Red Hat Openshift Data Foundation 4.16:

Version 1778077839 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778049594 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778049298 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778049745 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778049753 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778050558 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778049818 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778049878 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778049920 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778049945 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778060364 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778050037 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778050035 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778050048 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778050508 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778050119 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778050290 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778059723 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778050352 and below * is unaffected.

Red Hat Openshift Data Foundation 4.17:

Version 1778050482 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045210 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778044961 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045359 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045374 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045891 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045472 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045534 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045524 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045587 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778046067 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045627 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045731 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045700 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778046234 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045792 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045858 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045945 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778045931 and below * is unaffected.

Red Hat Openshift Data Foundation 4.18:

Version 1778046079 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776079019 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776706744 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707205 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707231 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707760 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707301 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776079295 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707362 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707418 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707377 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707947 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707456 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707526 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707526 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707945 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707569 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707724 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707763 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776707771 and below * is unaffected.

Red Hat Openshift Data Foundation 4.19:

Version 1776079774 and below * is unaffected.