CVE-2026-38431 | Frappe ERPNext up to 15.103.1 Template Expression special elements used in a template engine

A vulnerability has been found in Frappe ERPNext up to 15.103.1 and classified as critical. The impacted element is an unknown function of the component Template Expression Handler. Performing a manipulation results in improper neutralization of special elements used in a template engine.

This vulnerability was named CVE-2026-38431. The attack may be initiated remotely. There is no available exploit.