Vulnerabilities

TI-2026-71238 CVE-2026-59976

Path traversal in ConvertX lets attackers write arbitrary files

HIGH 70

ConvertX is a self-hosted file conversion service.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00769 Published 2026-10-12 Fixed in 0.18.0 CWE-22

TI-2026-71239 CVE-2026-59977

Cross-site request forgery in ConvertX deletes conversion history

LOW 34

ConvertX is a self-hosted file conversion service.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00148 Published 2026-10-12 Fixed in 0.18.0 CWE-352

TI-2026-70674 CVE-2026-108694 · GHSA-r4xg-82px-pwx6

Arbitrary file read in ConvertX via Pandoc converter

LOW 31

ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0026 Published 2026-10-11 No fix listed CWE-73

TI-2026-67393 CVE-2026-105080 · GHSA-6w7x-66x4-9w6v

In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead…

MEDIUM 43

In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00414 Published 2026-10-03 Fixed in 0.19.0 CWE-829

TI-2026-58743 CVE-2026-85618 · GHSA-g238-2mw5-49xx

ConvertX 0.17.0 Arbitrary File Read via LaTeX Input Directives

LOW 32

ConvertX 0.17.0 contains an arbitrary file read vulnerability in the xelatex converter that allows authenticated users to read files by uploading LaTeX files with input directives.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00481 Published 2026-09-04 No fix listed CWE-22

TI-2026-19946 CVE-2026-24741

ConvertX Vulnerable to Arbitrary File Deletion via Path Traversal in `POST /delete`

HIGH 68

ConvertXis a self-hosted online file converter.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00474 Published 2026-01-27 Fixed in 0.17.0 CWE-22

TI-2025-40881 CVE-2025-66449

ConvertX has Path Traversal that leads to Arbitrary File Write and Arbitrary Code Execution

HIGH 73