CVE-2026-108694
Last modified
CVE-2026-108694 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file's contents..
Description
ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file's contents.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| C4illin | ConvertX | <= 0.19.0 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-108694?
How severe is CVE-2026-108694?
How do I fix CVE-2026-108694?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-108688Eladmin through 2.7 contains a missing authorization vulnera…4.3
- CVE-2026-108689Wukong AICRM through 20260610 contains a missing authorizati…5.4
- CVE-2026-108690mall4j through 4.0 contains an information disclosure vulner…4.3
- CVE-2026-108691mall4j through 4.0 contains an improper authorization vulner…5.4
- CVE-2026-1086921Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a miss…6.5
- CVE-2026-108693ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contai…7
- CVE-2026-108695MultiVendorX WordPress plugin through 5.0.19 contains an inc…7.1
- CVE-2026-108696CoreShop through 1.5.5 contains an authorization bypass vuln…4.3
- CVE-2026-108697CoreShop through 2026.2.2 contains a missing authorization v…4.3
- CVE-2026-108698hyper-mcp through 0.8.3 contains a signature verification by…6.5
- CVE-2026-108699hyper-mcp through 0.8.3 contains an improper signature verif…6.5
- CVE-2026-1087The Guardian News Feed plugin for WordPress is vulnerable to…4.3
Are you affected by CVE-2026-108694?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST