diff --git a/config/_default/hugo.toml b/config/_default/hugo.toml
index 4674933..3936883 100644
--- a/config/_default/hugo.toml
+++ b/config/_default/hugo.toml
@@ -55,3 +55,6 @@ enableGitInfo = true
   [[module.mounts]]
     source = "assets"
     target = "assets"
+  [security.exec]
+      # Hugo must be allowed to run the asciidoctor binary
+      allow = ['^asciidoctor$']
\ No newline at end of file