Critical · published January 22, 2026
🚨 A single malicious document can unleash chaos on your Grist server! This vulnerability lets attackers run arbitrary processes if you use an insecure sandbox. 🔥 Think of it like a restaurant where a chef trusts any recipe without checking for allergens. One wrong ingredient could lead to a disaster in the kitchen — similarly, a rogue spreadsheet can wreak havoc on your server if you're not careful! An attacker could exploit this flaw to execute harmful processes on the server, potentially leading to data breaches, service disruptions, or even complete system takeover. This vulnerability is absolutely devastating, as it puts your entire setup at risk!
Think of it like a restaurant where a chef trusts any recipe without checking for allergens. One wrong ingredient could lead to a disaster in the kitchen — similarly, a rogue spreadsheet can wreak havoc on your server if you're not careful! This critical vulnerability occurs when Grist runs user-defined formulas in Pyodide, which lacks a sufficient sandbox barrier. If the `GRIST_SANDBOX_FLAVOR` is set to `pyodide`, a malicious document could run unrestricted code on the server.
An attacker could exploit this flaw to execute harmful processes on the server, potentially leading to data breaches, service disruptions, or even complete system takeover. This vulnerability is absolutely devastating, as it puts your entire setup at risk! To protect your Grist setup, immediately upgrade to version 1.7.9 or later, where this issue has been resolved. If upgrading isn't an option right now, switch the `GRIST_SANDBOX_FLAVOR` to `gvisor` as a temporary workaround. 🛡️ You've got this! Follow these steps, and you'll keep your Grist server safe and sound! 😊