What is CVE-2026-119343?

CVE-2026-119343 is a medium-severity vulnerability in Stirling-Tools Stirling-Pdf, classified under External Control of File Name or Path. CVSS score: 6.8/10. Published 2026-10-30.

How severe is CVE-2026-119343?

Medium severity. CVSS v3 base score is 6.8 out of 10.

SSRF in Stirling-Tools Stirling-Pdf

CVE-2026-119343

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0, POST /api/v1/ai/tools/create-pdf-from-html-agent accepts attacker-controlled htmlContent and passes it to WeasyPrint without CustomHtmlSanitizer, unlike the sanitized /api/v1/convert/html/pdf control path. HTTP and HTTPS resource references can make server-side requests to internal or cloud-metadata destinations, while file references can embed local content readable by the Stirling-PDF process into the generated PDF. The endpoint is reachable without credentials when security.enableLogin is false, and the flaw is distinct from earlier Stirling-PDF WeasyPrint vulnerabilities in older conversion paths. This issue is fixed in version 3.0.0.

Published 2026-10-30 · last modified 2026-10-30.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

Stirling-Tools Stirling-Pdf — versions < 3.0.0

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2026-119343?: CVE-2026-119343 is a medium-severity vulnerability in Stirling-Tools Stirling-Pdf, classified under External Control of File Name or Path. CVSS score: 6.8/10. Published 2026-10-30.
How severe is CVE-2026-119343?: Medium severity. CVSS v3 base score is 6.8 out of 10.