CVE-2026-25153 | Backstage up to 1.13.10/1.14.0 MkDocs Feature code injection (GHSA-6jr7-99pf-8vgf)

A vulnerability classified as critical was found in Backstage up to 1.13.10/1.14.0. This vulnerability affects unknown code of the component MkDocs Feature. Executing a manipulation can lead to code injection.

This vulnerability appears as CVE-2026-25153. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.