CVE-2026-119343

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0, POST /api/v1/ai/tools/create-pdf-from-html-agent accepts attacker-controlled htmlContent and passes it to WeasyPrint without CustomHtmlSanitizer, unlike the sanitized /api/v1/convert/html/pdf control path. HTTP and HTTPS resource references can make server-side requests to internal or cloud-metadata destinations, while file references can embed local content readable by the Stirling-PDF process into the generated PDF. The endpoint is reachable without credentials when security.enableLogin is false, and the flaw is distinct from earlier Stirling-PDF WeasyPrint vulnerabilities in older conversion paths. This issue is fixed in version 3.0.0.

• CWE-73
• CWE-918

• https://github.com/Stirling-Tools/Stirling-PDF/commit/0570c4c4d9e7bf4786a02ab770ef75f116ac3719
• https://github.com/Stirling-Tools/Stirling-PDF/pull/7018
• https://github.com/Stirling-Tools/Stirling-PDF/releases/tag/v3.0.0
• https://github.com/Stirling-Tools/Stirling-PDF/security/advisories/GHSA-3x7x-943g-269w

Published

Oct 30, 2026

Last Modified

Oct 30, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-119338Tesseract is an open source OCR engine. From 5.4.0 until 5.5…6.9
• CVE-2026-119339Tesseract is an open source OCR engine. Prior to 5.5.4, Weig…5.5
• CVE-2026-11934IBM Verify Identity Access could allow an administrator to e…7.2
• CVE-2026-119340Tesseract is an open source OCR engine. Prior to 5.5.4, GENE…5.5
• CVE-2026-119341Tesseract is an open source OCR engine. Prior to 5.5.4, Read…0
• CVE-2026-119342Stirling-PDF is a locally hosted web application that facili…5.3
• CVE-2026-11936IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Ver…5.4
• CVE-2026-119364ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 conta…5.3
• CVE-2026-119365Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2026-119367Missing Authorization vulnerability in Liquid Web / StellarW…5.4
• CVE-2026-119368Missing Authorization vulnerability in Liquid Web / StellarW…5.3
• CVE-2026-119369Improper Neutralization of Input During Web Page Generation …6.5