GeoNode versions prior to 5.0.3 contain an unrestricted file upload vulnerability that allows attackers to bypass upload validation using specially crafted requests. This flaw enables the storage and serving of malicious files, potentially leading to limited confidentiality, integrity, and availability impacts. The vulnerability is tracked as CVE-2026-46429 and has a medium severity rating with a CVSS score of 5.5. A fix is available in GeoNode version 5.0.3.