Back Linuxsecurity

Ubuntu 24 PlantUML High Risk Code Execution Threat 2026

Linuxsecurity •LinuxSecurity Advisories • February 9, 2026

PlantUML is a program allowing to draw UML diagrams, using a simple and human readable text description. It is extremely useful for code documenting, sketching project architecture during team conversations and so on. PlantUML supports the following diagram types - sequence diagram - use case diagram - class diagram - activity diagram - component diagram - state diagram Update Information : Update to version 1.2026.1

PlantUML is a program allowing to draw UML diagrams, using a simple

and human readable text description. It is extremely useful for code

documenting, sketching project architecture during team conversations

PlantUML supports the following diagram types

Update to version 1.2026.1

* Wed Jan 28 2026 blinxen - 1:1.2026.1-1 - Update to verison 1.2026.1 (rhbz#2428317) * Sat Jan 17 2026 Fedora Release Engineering - 1:1.2025.10-2 - Rebuilt for * Sat Nov 8 2025 blinxen - 1:1.2025.10-1 - Update to version 1.2025.10

[ 1 ] Bug #2430307 - CVE-2026-0858 plantuml: PlantUML: Arbitrary script execution via Stored Cross-Site Scripting in GraphViz diagrams [epel-10] [ 2 ] Bug #2430308 - CVE-2026-0858 plantuml: PlantUML: Arbitrary script execution via Stored Cross-Site Scripting in GraphViz diagrams [fedora-42] [ 3 ] Bug #2430309 - CVE-2026-0858 plantuml: PlantUML: Arbitrary script execution via Stored Cross-Site Scripting in GraphViz diagrams [fedora-43] [ 4 ] Bug #2430310 - CVE-2026-0858 plantuml: PlantUML: Arbitrary script execution via Stored Cross-Site Scripting in GraphViz diagrams [epel-9]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-e25e1b1d0f' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

High Risk Code Execution Vulnerability in PlantUML for Ubuntu 22 and 24 A security flaw affecting PlantUML, used for creating UML diagrams, has been identified in Ubuntu 22 and 24. This vulnerability allows for high-risk code execution, impacting users who rely on this tool for documentation and project architecture. Users are advised to update to version 1.2026.1 to mitigate the risk. 2 sources 40

Extracted Entities

Ubuntu 24 PlantUML High Risk Code Execution Threat 2026

The full story

Extracted Entities

Companies (2)

CVEs (1)

Platforms (1)

Vulnerabilities (1)