Read the docs
TI-2026-83399 Aliases CVE-2026-119343

Server-side request forgery in Stirling-PDF AI HTML to PDF endpoint

Priority MEDIUM 63CWE-73Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-73 and the CVSS impact.

Summary

Stirling-PDF before 3.0.0 passes attacker-supplied HTML from the /api/v1/ai/tools/create-pdf-from-html-agent endpoint to WeasyPrint without sanitization. This enables server-side request forgery (CWE-918), letting requests reach internal or cloud metadata hosts and embedding local files readable by the process into the generated PDF. An unauthenticated remote attacker can do this when security.enableLogin is false.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

Description from the CNA

Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.0.0, POST /api/v1/ai/tools/create-pdf-from-html-agent accepts attacker-controlled htmlContent and passes it to WeasyPrint without CustomHtmlSanitizer, unlike the sanitized /api/v1/convert/html/pdf control path. HTTP and HTTPS resource references can make server-side requests to internal or cloud-metadata destinations, while file references can embed local content readable by the Stirling-PDF process into the generated PDF. The endpoint is reachable without credentials when security.enableLogin is false, and the flaw is distinct from earlier Stirling-PDF WeasyPrint vulnerabilities in older conversion paths. This issue is fixed in version 3.0.0.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00284 21st percentileScored 2026-11-07
Fix Fixed Stirling-PDF (Stirling-Tools): 3.0.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Stirling-ToolsStirling-PDFbefore 3.0.03.0.0Patch availableCNA
  • Stirling-PDF VendorStirling-Tools Affected before 3.0.0 Fixed in 3.0.0 Patch available CNA

Remediation

Upgrade Stirling-PDF to version 3.0.0, which fixes this issue.

Written with Claude Haiku 5.5 from the sources below · 2026-11-02

  • Fix · CNA Stirling-PDF (Stirling-Tools) Fixed in 3.0.0

Timeline

  1. 2026-10-30 Threatist record created from CVE-2026-119343
  2. 2026-11-01 Priority changed: MEDIUM → LOW
  3. 2026-11-02 CISA SSVC decision points changed
  4. 2026-11-02 Priority changed: LOW → MEDIUM

References

Other 4

  • TI-2025-34843 Stirling-PDF SSRF vulnerability on /api/v1/convert/markdown/pdf CVSS 3.1CRITICAL 9.8
  • TI-2025-34834 Stirling-PDF SSRF vulnerability on /api/v1/convert/file/pdf CVSS 3.1CRITICAL 9.8
  • TI-2025-34833 Stirling-PDF SSRF vulnerability on /api/v1/convert/html/pdf CVSS 3.1CRITICAL 9.8
  • TI-2026-74445 Code injection in Stirling-PDF via H2 database import CVSS 3.1CRITICAL 9.1
  • TI-2025-29281 Stirling-PDF Server-Side Request Forgery (SSRF)-Induced Arbitrary File Read Vulnerability CVSS 4.0HIGH 7.7
  • TI-2026-76934 Stirling-PDF H2 SQL denylist bypass allows Java method execution CVSS 4.0HIGH 8.6
See all 18 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences