Read the docs
TI-2026-45275 Aliases CVE-2026-63630

BentoPDF: Workflow Import Allows Unvalidated TSA URL Leading to PDF Hash Exfiltration via RFC 3161 Requests

Priority MEDIUM 50CWE-201Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
High
Impact type
Information disclosure, Code execution
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-201 and CWE-502.

Summary

BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, deserializeWorkflow() accepts the Timestamp node's tsaUrl control from imported JSON without schema or destination validation. When a user imports the crafted workflow and runs it against a PDF, timestampPdf() sends an RFC 3161 TimeStampReq containing the PDF's SHA-256 MessageImprint to the attacker-selected endpoint. The default self-hosted configuration does not set VITE_CORS_PROXY_URL, so the request bypasses the proxy's ALLOWED_TSA_HOSTS checks and is sent directly. The disclosed digest can confirm that a document matches a known file and can correlate the same document across users without revealing its contents. This vulnerability is fixed in 2.8.7.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00382 32nd percentileScored 2026-11-07
Fix Fixed bentopdf (alam00000): 2.8.7

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
alam00000bentopdfbefore 2.8.72.8.7Patch availableCNA
  • bentopdf Vendoralam00000 Affected before 2.8.7 Fixed in 2.8.7 Patch available CNA

Remediation

  • Fix · CNA bentopdf (alam00000) Fixed in 2.8.7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-63630

References

Other 3

  • TI-2026-54083 BentoPDF: SSRF in cors-proxy-worker.js via DNS-based hostname allowlist bypass CVSS 3.1HIGH 8.6
  • TI-2026-30171 BentoPDF: Stored XSS via Markdown Editor Leading to Persistent File Exfiltration CVSS 4.0HIGH 7.0
  • TI-2026-74400 Server-side request forgery in BentoPDF CORS proxy via DNS rebinding CVSS 3.1MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences