{"id":"CVE-2026-119343","aliases":[],"cve":{"records":[{"id":"CVE-2026-119343","source":"GitHub_M","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-29T20:44:30.287Z","published":"2026-10-30T20:31:48.374Z","modified":"2026-10-30T20:31:48.374Z"}],"publishers":[{"name":"GitHub_M","role":"CNA","organizationId":"a0819718-46f1-4df5-94e2-005712e83aaa","modified":"2026-10-30T20:31:48.374Z"}],"references":[{"url":"https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-3x7x-943g-269w","tags":["x_refsource_CONFIRM"],"source":"GitHub_M"},{"url":"https://github.com/Stirling-Tools/Stirling-PDF/pull/7018","tags":["x_refsource_MISC"],"source":"GitHub_M"},{"url":"https://github.com/Stirling-Tools/Stirling-PDF/commit/0570c4c4d9e7bf4786a02ab770ef75f116ac3719","tags":["x_refsource_MISC"],"source":"GitHub_M"},{"url":"https://github.com/Stirling-Tools/Stirling-PDF/releases/tag/v3.0.0","tags":["x_refsource_MISC"],"source":"GitHub_M"}],"weaknesses":[{"id":"CWE-73","description":"CWE-73: External Control of File Name or Path","source":"GitHub_M"},{"id":"CWE-918","description":"CWE-918: Server-Side Request Forgery (SSRF)","source":"GitHub_M"}],"applicability":[],"prioritization":[]},"title":"Stirling-PDF: AI create-pdf-from-html-agent skips HTML sanitization enabling WeasyPrint SSRF and local file read","titleSource":"GitHub_M","descriptionSource":"GitHub_M","description":"Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0, POST /api/v1/ai/tools/create-pdf-from-html-agent accepts attacker-controlled htmlContent and passes it to WeasyPrint without CustomHtmlSanitizer, unlike the sanitized /api/v1/convert/html/pdf control path. HTTP and HTTPS resource references can make server-side requests to internal or cloud-metadata destinations, while file references can embed local content readable by the Stirling-PDF process into the generated PDF. The endpoint is reachable without credentials when security.enableLogin is false, and the flaw is distinct from earlier Stirling-PDF WeasyPrint vulnerabilities in older conversion paths. This issue is fixed in version 3.0.0.","score":6.8,"severity":"medium","published":"2026-10-30T20:31:48.374Z","modified":"2026-10-30T20:31:48.374Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Stirling-Tools","name":"Stirling-PDF","platforms":[],"versions":[{"version":"< 3.0.0","status":"affected"}],"cpes":[],"source":"GitHub_M","url":"https://www.cve.org/CVERecord?id=CVE-2026-119343"}],"remediation":[],"references":["https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-3x7x-943g-269w","https://github.com/Stirling-Tools/Stirling-PDF/pull/7018","https://github.com/Stirling-Tools/Stirling-PDF/commit/0570c4c4d9e7bf4786a02ab770ef75f116ac3719","https://github.com/Stirling-Tools/Stirling-PDF/releases/tag/v3.0.0"],"sources":[{"name":"CVE","id":"CVE-2026-119343","modified":"2026-10-30T20:31:48.374Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-119343"}],"assessments":[{"source":"GitHub_M","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","score":6.8}],"sourceAffected":[],"observedAt":"2026-10-30T21:23:00.586Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T10:20:31.211Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-30T21:30:37.087Z","attemptedAt":"2026-10-30T21:30:37.087Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-30T21:30:38.158Z","attemptedAt":"2026-10-30T21:30:38.158Z"},{"source":"EUVD","status":"refresh-failed","attemptedAt":"2026-10-30T21:30:35.617Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-30T21:30:36.535Z","attemptedAt":"2026-10-30T21:30:36.535Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-119343","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119343","modified":"2026-10-30T21:16:53.607","score":6.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","checkedAt":"2026-10-30T21:30:37.087Z"}],"aiSummary":{"text":"Stirling-PDF versions prior to 3.0.0 are vulnerable to server-side request forgery (SSRF) and local file read due to skipping HTML sanitization in the create-pdf-from-html-agent endpoint. An attacker can make server-side requests to internal or cloud-metadata destinations and embed local content into the generated PDF. The endpoint is reachable without credentials when security.enableLogin is false.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-31T05:01:12.943Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-119343"}]}}