CVE-2026-43979

Local Deep Research is an AI-powered research assistant for deep, iterative research. Prior to 1.6.0, PDFService._markdown_to_html() constructs an HTML document by interpolating user-controlled values — specifically title (sourced from research.title or research.query) and metadata key-value pairs — directly into an f-string without any HTML escaping. An authenticated attacker can craft a research query containing HTML special characters to inject arbitrary HTML tags into the document processed by WeasyPrint during PDF export. This injection can be chained to trigger a Server-Side Request Forgery (SSRF), bypassing the application's existing SSRF defenses in ssrf_validator.py. This vulnerability is fixed in 1.6.0.

• CWE-79
• CWE-918

• https://github.com/LearningCircuit/local-deep-research/pull/3082
• https://github.com/LearningCircuit/local-deep-research/pull/3613
• https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-fj2m-qvh9-jq4q
• https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-fj2m-qvh9-jq4q

Published

May 28, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-43972Origin Validation Error vulnerability in ninenines gun (gun_…6.3
• CVE-2026-43973Uncontrolled Resource Consumption vulnerability in ninenines…8.7
• CVE-2026-43974Unexpected Status Code or Return Value vulnerability in nine…8.7
• CVE-2026-43975FolderUploadsFileManager in Apache Wicket does not validate …6.5
• CVE-2026-43977wger is a free, open-source workout and fitness manager. In …7.5
• CVE-2026-43978wger is a free, open-source workout and fitness manager. In …8.1
• CVE-2026-4398Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-43981Algernon is a small self-contained pure-Go web server. Prior…8.2
• CVE-2026-43982Algernon is a small self-contained pure-Go web server. Prior…8.7
• CVE-2026-43983Pocket ID is an OIDC provider that allows users to authentic…8.1
• CVE-2026-43984Tautulli is a Python based monitoring and tracking tool for …8.9
• CVE-2026-43985Tautulli is a Python based monitoring and tracking tool for …8.8