CVE-2026-77581

BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, the certificate and timestamp CORS proxy in cloudflare/cors-proxy-worker.js uses isPrivateOrReservedHost() to validate a supplied hostname separately from the DNS resolution used by fetch(targetUrl), allowing an attacker-controlled hostname to resolve to an internal or reserved destination after validation. A certificate-like path can satisfy ALLOWED_PATH_PATTERNS, and direct clients can forge the browser-oriented Origin header. Deployments without PROXY_SECRET skip the optional signature check, while the signature is an anti-abuse measure rather than a destination-security boundary. The proxy has a 10 MB response limit and can relay response bodies from reachable destinations. The advisory identifies both the official Worker deployment and self-hosted instances as impacted where the Worker execution environment can reach internal or reserved destinations. This vulnerability is fixed in 2.8.7.

• CWE-918

• https://github.com/alam00000/bentopdf/commit/45496fcd2ed6e02dcdde0d3839cc5024c091760c
• https://github.com/alam00000/bentopdf/commit/58cd1a8893bfe06e4a59a72adc2e7db00a8b9266
• https://github.com/alam00000/bentopdf/releases/tag/v2.8.7
• https://github.com/alam00000/bentopdf/security/advisories/GHSA-5xjf-rr5x-pcfj
• https://github.com/alam00000/bentopdf/security/advisories/GHSA-5xjf-rr5x-pcfj

Published

Sep 24, 2026

Last Modified

Sep 24, 2026

Status

Received

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-77558A malicious actor with access to the network could exploit a…7.5
• CVE-2026-77560Tinyauth is an authentication and authorization server. Prio…8.1
• CVE-2026-77561Tinyauth is an authentication and authorization server. Prio…5.3
• CVE-2026-77567Filament is a collection of full-stack components for accele…8.1
• CVE-2026-77568Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-77573Weblate is a web-based continuous localization platform used…3.5
• CVE-2026-77582Tinyauth is an authentication and authorization server. Prio…6.9
• CVE-2026-77584Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that …8.2
• CVE-2026-77585The Okta Privileged Access client does not reject a leading …5.3
• CVE-2026-77586In MongoDB Connector for BI, MongoDB object names such as co…8
• CVE-2026-77587Tor before 0.4.9.11 is prone to a use-after-free (and potent…7.5
• CVE-2026-77601OpenC3 COSMOS provides the functionality needed to send comm…8.8