CVE-2026-119343mediumCWE-73CWE-918

CVE-2026-119343: medium-severity vulnerability in Stirling-Tools Stirling-PDF

Stirling-PDF: AI create-pdf-from-html-agent skips HTML sanitization enabling WeasyPrint SSRF and local file read

Published · Updated

Follow this CVE+ Monitor Stirling-PDF

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.3%
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0, POST /api/v1/ai/tools/create-pdf-from-html-agent accepts attacker-controlled htmlContent and passes it to WeasyPrint without CustomHtmlSanitizer, unlike the sanitized /api/v1/convert/html/pdf control path. HTTP and HTTPS resource references can make server-side requests to internal or cloud-metadata destinations, while file references can embed local content readable by the Stirling-PDF process into the generated PDF. The endpoint is reachable without credentials when security.enableLogin is false, and the flaw is distinct from earlier Stirling-PDF WeasyPrint vulnerabilities in older conversion paths. This issue is fixed in version 3.0.0.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Affected products
Stirling-Tools · Stirling-PDF
Related CVEs — Stirling-Tools Stirling-PDF

In the same product, most dangerous first.

CVE-2026-85714CRITICALStirling-PDF: Remote Code Execution via H2EPSS 3.4%CVE-2025-55161HIGHStirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdfEPSS 2.2%CVE-2025-55150HIGHStirling-PDF SSRF vulnerability on /api/v1/convert/html/pdfEPSS 1.8%CVE-2026-113605HIGHStirling-PDF 2.13.2 through 3.2.0 H2 SQL Denylist Bypass via import-databaseEPSS 0.7%CVE-2024-52286LOWSelf Cross Site Scripting (XSS) In Merge Functionality in Stirling-PDFEPSS 0.5%CVE-2025-46568HIGHStirling-PDF Server-Side Request Forgery (SSRF)-Induced Arbitrary File Read VulnerabilityEPSS 0.5%